Method Validate

cel/validator.go:536–575

(e *Env, _ ValidatorConfig, a *ast.AST, iss *Issues)

}

func (v regexProgramSizeLimitValidator) Validate(e *Env, _ ValidatorConfig, a *ast.AST, iss *Issues) {
	if v.limit <= 0 {
		return
	}
	root := ast.NavigateAST(a)
	callExprs := ast.MatchDescendants(root, ast.KindMatcher(ast.CallKind))
	for _, call := range callExprs {
		c := call.AsCall()
		fn := c.FunctionName()
		if !isRegexFunctionName(fn) {
			continue
		}
		args := c.Args()
		var regexArgIndex int
		if (fn == overloads.Matches || fn == "matches") && c.Target() != nil {
			regexArgIndex = 0
		} else {
			regexArgIndex = 1
		}
		if len(args) <= regexArgIndex {
			continue
		}
		arg := args[regexArgIndex]
		if arg.Kind() != ast.LiteralKind {
			continue
		}
		pattern, ok := arg.AsLiteral().Value().(string)
		if !ok {
			continue
		}
		sz, err := types.RegexProgramSize(pattern)
		if err != nil {
			// Invalid regex literals are handled in a different validator.
			continue
		}
		if sz > v.limit {
			iss.ReportErrorAtID(arg.ID(), "regex program size %d exceeds limit of %d", sz, v.limit)
		}
	}
}

func isEmptyRangeComprehension(e ast.NavigableExpr) bool {
	if e.Kind() != ast.ComprehensionKind {