Skip to content

Releases: cedar-policy/cedar

v2.2.2

20 Jul 19:13
8767cec
Compare
Choose a tag to compare

Release 2.2.2, available on crates.io

What's Changed

Fixed

  • Fix a panic in PolicySet::link() that could occur when the function was called
    with a policy id corresponding to a static policy.

v2.3.0

29 Jun 15:31
cbbc356
Compare
Choose a tag to compare

Release 2.3.0, available on crates.io

Changed

Implementation of RFC 9 which disallows embedded whitespace, comments, and control characters in the inputs to several Rust API functions including EntityTypeName::from_str() and EntityNamespace::from_str(), as well as in some fields of the Cedar JSON schema format (e.g., namespace declarations, entity type names), Cedar JSON entities format (e.g., entity type names, extension function names) and the Cedar JSON policy format used by Policy::from_json() (e.g., entity type names, extension function names). The risk that this may be a breaking change for some Cedar users was accepted due to the potential security ramifications; see discussion in the RFC.