silvermine / fsaba / 31218917455

100%

master: 100%

push

github

fix: treat a missing context field as matching no pattern

A field that is absent from the context has no value to match, so no pattern matches it,
including a bare wildcard. This makes StringMatches and StringDoesNotMatch behave the same
way for every pattern.

BREAKING CHANGE: A condition value of '*' no longer matches a context field that is
absent. Policies that used '*' with StringMatches to match every request, including
requests without the field, must use StringMatchesIfExists instead. A '*' with
StringDoesNotMatch passes for requests without the field, which makes a Deny policy that
uses it apply to those requests.

107 of 107 branches covered (100.0%)

Branch coverage included in aggregate %.

4 of 4 new or added lines in 1 file covered. (100.0%)

145 of 145 relevant lines covered (100.0%)

204.52 hits per line