Releases: cedar-policy/cedar
Releases · cedar-policy/cedar
v2.2.2
Release 2.2.2, available on crates.io
What's Changed
Fixed
- Fix a panic in
PolicySet::link()
that could occur when the function was called
with a policy id corresponding to a static policy.
v2.3.0
Release 2.3.0, available on crates.io
Changed
Implementation of RFC 9 which disallows embedded whitespace, comments, and control characters in the inputs to several Rust API functions including EntityTypeName::from_str()
and EntityNamespace::from_str()
, as well as in some fields of the Cedar JSON schema format (e.g., namespace declarations, entity type names), Cedar JSON entities format (e.g., entity type names, extension function names) and the Cedar JSON policy format used by Policy::from_json()
(e.g., entity type names, extension function names). The risk that this may be a breaking change for some Cedar users was accepted due to the potential security ramifications; see discussion in the RFC.