nuke/lib
Xe Iaso 6b1cd6120f
fix!(policy/checker): make List and-like (#1217)
* fix!(policy/checker): make List and-like

This has the potential to break user configs.

Anubis lets you stack multiple checks at once with blocks like this:

```yaml
name: allow-prometheus
action: ALLOW
user_agent_regex: ^prometheus-probe$
remote_addresses:
  - 192.168.2.0/24
```

Previously, this only returned ALLOW if _any one_ of the conditions
matched. This behaviour has changed to only return ALLOW if _all_ of the
conditions match.

I have marked this as a potentially breaking change because I'm
absolutely certain that someone is relying on this behaviour due to
spacebar heating. If this bites you, please let me know ASAP.

Signed-off-by: Xe Iaso <me@xeiaso.net>
Assisted-by: GPT-OSS 120b on local hardware

* fix(policy/checker): more explicit short-circuit

Signed-off-by: Xe Iaso <me@xeiaso.net>

---------

Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-10-25 01:25:05 +00:00
..
challenge feat(metarefresh): randomly use the Refresh header (#1133) 2025-09-16 17:32:13 -04:00
localization locale: Update Nynorsk translation (#1204) 2025-10-22 12:46:46 +00:00
policy fix!(policy/checker): make List and-like (#1217) 2025-10-25 01:25:05 +00:00
store fix(store/bbolt): remove actorify (#1215) 2025-10-24 19:28:58 +00:00
testdata fix(web): embed challenge ID in pass-challenge invocations (#944) 2025-08-04 18:49:19 +00:00
thoth chore: expose thoth in lib (#911) 2025-07-25 10:58:30 -04:00
anubis.go Xe/show error state (#1203) 2025-10-21 13:10:27 -04:00
anubis_test.go fix(lib): de-flake package lib tests (#1187) 2025-10-13 11:50:13 -04:00
config.go fix(lib): enable multiple consecutive slash support (#1155) 2025-09-27 13:44:46 -04:00
config_test.go chore: expose thoth in lib (#911) 2025-07-25 10:58:30 -04:00
http.go Xe/show error state (#1203) 2025-10-21 13:10:27 -04:00
http_test.go feat: support HTTP redirect for forward authentication middleware in Traefik (#368) 2025-08-12 20:59:45 -04:00