Chris LuandDevin 4c2c0ff21c s3: fix wildcard matcher skipping '*' targets in policy patterns (#12034) ...

* s3: check pattern '*' before literal equality in matchWildcardString

When the target string carried a '*' at the offset of the pattern's '*',
the literal-equality case consumed it as a one-character match and no
backtrack point was recorded, so the comparison returned false. A Deny
Resource carrying a policy variable, or an Allow carrying NotResource,
could then be sidestepped by an object key containing '*' at the aligned
offset.

* test: cover literal asterisks in wildcard match targets

---------

Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-10-24 08:20:22 -07:00

..

collection_filter_test.go

shell: make every -collection flag parse the same way (#11794)

2026-10-16 21:07:51 -07:00

collection_filter.go

shell: make every -collection flag parse the same way (#11794)

2026-10-16 21:07:51 -07:00

filter.go

Worker set its working directory (#8461)

2026-02-27 12:22:21 -08:00

wildcard_matcher_test.go

s3: fix wildcard matcher skipping '*' targets in policy patterns (#12034)

2026-10-24 08:20:22 -07:00

wildcard_matcher.go

s3: fix wildcard matcher skipping '*' targets in policy patterns (#12034)

2026-10-24 08:20:22 -07:00