fix: a deny lifts where a condition keys a map by NaN, converts NaN to a string, or compares a host's map or optional holding it by giraffesyo · Pull Request #84 · parallelworks/rbac

fix: a deny comparing a map keyed by a double that isn't finite lifts, as one keyed by NaN equals no map

Michael McQuade (giraffesyo)

committed

01106ae

fix: comparing a map the host passes keyed by a double that isn't finite decides, and looking one up by an infinite key a condition reads finds it

Michael McQuade (giraffesyo)

committed

245fa81

fix: a condition converting a double that isn't finite to a string decides, as "NaN" compares as any string does

Michael McQuade (giraffesyo)

committed

8505fbd

fix: an optional value the host passes holding a double that isn't finite compares as unequal, and comparing one is charged as a single value however much it holds

Michael McQuade (giraffesyo)

committed

be488d5

fix: a key another version of CEL folds into a double that isn't finite would be read unchecked

Michael McQuade (giraffesyo)

committed

3002bda

docs: Condition says plainly that `in` a map the host keys by a double that isn't finite is false for a key it doesn't hold

Michael McQuade (giraffesyo)

committed

1b9ccd6

fix: converting to a string a value CEL checks as another type than it is, as `(dyn([true]) + [""])[0]`, decides where CEL's conversion fails

Michael McQuade (giraffesyo)

committed

d6e0b83

docs: Condition and Attributes say comparing a map keyed by a double that isn't finite fails against one of as many entries, as one of another size compares unequal

Michael McQuade (giraffesyo)

committed

a6934d8

fix: indexing by a JSON attribute parses it twice to find whether it is a double that isn't finite

Michael McQuade (giraffesyo)

committed

8ea1c41

fix: compiling any condition copies every function CEL declares, though few convert a value to a string

Michael McQuade (giraffesyo)

committed

59c468b

test: a conversion to a string that string() has no binding for isn't a condition

Michael McQuade (giraffesyo)

committed

4e3f311

Navigation Menu

Repository navigation

fix: a deny lifts where a condition keys a map by NaN, converts NaN to a string, or compares a host's map or optional holding it - #84

fix: a deny lifts where a condition keys a map by NaN, converts NaN to a string, or compares a host's map or optional holding it#84
Michael McQuade (giraffesyo) merged 11 commits into
canaryfrom
fix/nan-map-keys

Commits on Oct 22, 2026

fix: a deny comparing a map keyed by a double that isn't finite lifts, as one keyed by NaN equals no map

fix: comparing a map the host passes keyed by a double that isn't finite decides, and looking one up by an infinite key a condition reads finds it

fix: a condition converting a double that isn't finite to a string decides, as "NaN" compares as any string does

fix: an optional value the host passes holding a double that isn't finite compares as unequal, and comparing one is charged as a single value however much it holds

fix: a key another version of CEL folds into a double that isn't finite would be read unchecked

docs: Condition says plainly that `in` a map the host keys by a double that isn't finite is false for a key it doesn't hold

fix: converting to a string a value CEL checks as another type than it is, as `(dyn([true]) + [""])[0]`, decides where CEL's conversion fails

docs: Condition and Attributes say comparing a map keyed by a double that isn't finite fails against one of as many entries, as one of another size compares unequal

fix: indexing by a JSON attribute parses it twice to find whether it is a double that isn't finite

fix: compiling any condition copies every function CEL declares, though few convert a value to a string

test: a conversion to a string that string() has no binding for isn't a condition