Avatar for the Cap-go user
Cap-go
capgo
BlogDocsChangelog

[codex] fix RBAC mixed-scope role escalation

#1942Merged
Comparing
codex/fix-ghsa-55q2-p3m2-x66x
(
eda1fdb
) with
main
(
b917a8a
)
CodSpeed Performance Gauge
0%
Untouched
28

Benchmarks

28 total
empty policy
benches/password-policy.bench.ts::getPasswordPolicyValidationErrors
CodSpeed Performance Gauge
0%
26.9 µs26.8 µs
multibyte password validation
benches/password-policy.bench.ts::getPasswordPolicyValidationErrors
CodSpeed Performance Gauge
0%
29.9 µs29.8 µs
no changes detected
benches/device-comparison.bench.ts::hasComparableDeviceChanged
CodSpeed Performance Gauge
0%
1 ms1 ms
invalid password (all rules fail)
benches/password-policy.bench.ts::getPasswordPolicyValidationErrors
CodSpeed Performance Gauge
0%
38.4 µs38.3 µs
sparse existing vs full device
benches/device-comparison.bench.ts::hasComparableDeviceChanged
CodSpeed Performance Gauge
0%
1.7 ms1.7 ms
number exceeding max
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
15.8 µs15.8 µs
changes detected (version_name differs)
benches/device-comparison.bench.ts::hasComparableDeviceChanged
CodSpeed Performance Gauge
0%
1.7 ms1.7 ms
NaN and Infinity
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
17.9 µs17.9 µs
non-number types
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
14.2 µs14.2 µs
float truncation
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
15 µs15 µs
with valid min length
benches/password-policy.bench.ts::getEffectivePasswordMinLength
CodSpeed Performance Gauge
0%
19.3 µs19.3 µs
with edge values
benches/password-policy.bench.ts::getEffectivePasswordMinLength
CodSpeed Performance Gauge
0%
18.3 µs18.3 µs
negative number
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
15.1 µs15.1 µs
zero
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
15.1 µs15.1 µs
with undefined
benches/password-policy.bench.ts::getEffectivePasswordMinLength
CodSpeed Performance Gauge
0%
14.2 µs14.2 µs
long ASCII password (72 bytes)
benches/password-policy.bench.ts::getPasswordUtf8ByteLength
CodSpeed Performance Gauge
0%
29.4 µs29.4 µs
valid number within range
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
25.5 µs25.5 µs
with custom fallback
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
12.3 µs12.3 µs
multibyte password (emoji + accented)
benches/password-policy.bench.ts::getPasswordUtf8ByteLength
CodSpeed Performance Gauge
0%
22.8 µs22.8 µs
full device
benches/device-comparison.bench.ts::buildNormalizedDeviceForWrite
CodSpeed Performance Gauge
0%
70.9 µs71 µs
full device object
benches/device-comparison.bench.ts::toComparableDevice
CodSpeed Performance Gauge
0%
42.1 µs42.1 µs
valid password against strict policy
benches/password-policy.bench.ts::getPasswordPolicyValidationErrors
CodSpeed Performance Gauge
0%
41.4 µs41.5 µs
ASCII password
benches/password-policy.bench.ts::getPasswordUtf8ByteLength
CodSpeed Performance Gauge
0%
40.5 µs40.5 µs
full existing row
benches/device-comparison.bench.ts::toComparableExisting
CodSpeed Performance Gauge
0%
39.9 µs39.9 µs
sparse device
benches/device-comparison.bench.ts::buildNormalizedDeviceForWrite
CodSpeed Performance Gauge
0%
17.2 µs17.2 µs

Commits

Click on a commit to change the comparison range
Base
main
b917a8a
-0.03%
fix(rbac): block mixed-scope role escalation
06a9ad2
1 month ago
by riderx
-0.04%
fix(rbac): harden scope validation checks
439814d
1 month ago
by riderx
+0.07%
Merge remote-tracking branch 'origin/main' into codex/fix-ghsa-55q2-p3m2-x66x
0822adf
29 days ago
by riderx
-0.02%
Merge remote-tracking branch 'origin/main' into codex/fix-ghsa-55q2-p3m2-x66x
eda1fdb
29 days ago
by riderx
© 2026 CodSpeed Technology
Home Terms Privacy Docs