github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-08 18:19:30 +00:00
Code Issues Projects Releases Wiki Activity

Also add endswith to lua parser (#443)

Browse Source 
* Also add endswith to lua parser

Add endswith as a symbol so it can be parsed in filter expressions.

* Unit test for endswith support

Add a test case for endswith support, based on the filename ending with null.
This commit is contained in:
Mark Stemm
2018-10-18 09:59:13 -07:00
committed by GitHub
parent 8d60d374f7
commit 7dbdb00109
3 changed files with 31 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
userspace/engine/lua/parser.lua
View File

@@ -265,7 +265,8 @@ local G = {
symb("contains") / "contains" +
symb("icontains") / "icontains" +
symb("glob") / "glob" +
symb("startswith") / "startswith";
symb("startswith") / "startswith" +
symb("endswith") / "endswith";
InOp = kw("in") / "in";
PmatchOp = kw("pmatch") / "pmatch";
UnaryBoolOp = kw("not") / "not";