Consider switching to `github.com/antonmedv/expr` for expression evaluation

[antonmedv]

Current Status

Hello,

I'd like to recommend considering a change in the expression evaluation library you currently use (github.com/Knetic/govaluate) to github.com/antonmedv/expr. Here's a concise rundown of the advantages expr offers:

1. Safety & Isolation: Prevents access to the Go runtime and its reflection.
2. Memory-Safe: Guards against common vulnerabilities like buffer overflows.
3. Side-Effect-Free: Ensures predictable and reliable evaluations.
4. Always Terminating: No risk of deadlocks; ensures performance isn't hindered.
5. Static Typing: Catches type errors early, enhancing robustness.
6. Optimized for Speed: Faster evaluations for improved overall performance.

Given these advantages, I believe expr might better serve the needs of your project. Your feedback or thoughts would be appreciated.

Best regards,
Anton

Expected

N/A

Solution

No response

Please let us know if you plan to work on this.

Maybe.

[denyeart]

I believe @ale-linux is familiar with the usage in /common/policydsl/policyparser.go and he could probably advise.

The challenge is that this logic is very sensitive to changes, any minor change in behavior could cause a fork between peers.