Function ValidateComprehensionNestingLimit

cel/validator.go:231–233

ValidateComprehensionNestingLimit ensures that comprehension nesting does not exceed the specified limit. This validator can be useful for preventing arbitrarily nested comprehensions which can take high polynomial time to complete. Note, this limit does not apply to comprehensions with an empty i

(limit int)

// no actual looping cost. The cel.bind() utilizes the comprehension structure to perform local variable
// assignments and supplies an empty iteration range, so they won't count against the nesting limit either.
func ValidateComprehensionNestingLimit(limit int) ASTValidator {
	return nestingLimitValidator{limit: limit}
}

type argChecker func(env *Env, call, arg ast.Expr) error