masaori335 opened a new pull request, #13674: URL: https://github.com/apache/trafficserver/pull/13674
The sandbox `functions` deny/warn list was only consulted for statement functions, so an entry naming a function used as a value in an expression was accepted by the loader and then silently ignored. `access()`, which reaches the filesystem, was among them. The split between the two resolvers is an implementation detail; the grammar has one `functionCall` rule and the policy YAML exposes one `functions` category, so both now go through the same check. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
