Method Validate

cel/validator.go:499–526

Validate implements the ASTValidator interface method.

(e *Env, _ ValidatorConfig, a *ast.AST, iss *Issues)

// Validate implements the ASTValidator interface method.
func (v bindNestingLimitValidator) Validate(e *Env, _ ValidatorConfig, a *ast.AST, iss *Issues) {
	root := ast.NavigateAST(a)
	comprehensions := ast.MatchDescendants(root, ast.KindMatcher(ast.ComprehensionKind))
	var celBinds []ast.NavigableExpr
	for _, comp := range comprehensions {
		if isCelBind(comp) {
			celBinds = append(celBinds, comp)
		}
	}
	if len(celBinds) <= v.limit {
		return
	}
	for _, comp := range celBinds {
		count := 0
		e := comp
		hasParent := true
		for hasParent {
			if isCelBind(e) {
				count++
				if count > v.limit {
					iss.ReportErrorAtID(comp.ID(), "cel.bind exceeds nesting limit")
					break
				}
			}
			e, hasParent = e.Parent()
		}
	}
}

func isEmptyRangeComprehension(e ast.NavigableExpr) bool {
	if e.Kind() != ast.ComprehensionKind {