unsafe built-in function calls in expression: http.send

[JinXiu2023]

It caused the error "unsafe built-in function calls in expression: http.send" when I used the function http.send(). There is only one command and I don't know where the error is .

I can reproduce the exception by the following code.

package example

response := http.send({"method": "get", "url": "http://xxx.com"})

And the output is :

Error Evaluating.
1 error occurred: policy.rego:4: rego_type_error: unsafe built-in function calls in expression: http.send

Thank you very much.

[srenatus]

Try this instead,

package example

response := res {
    res := http.send({"method": "get", "url": "http://xxx.com"})
}

I suspect it's a bug related to how the parser turns naked expressions into rules. If this ☝️ works, please file an issue -- your original example should work, too.

[anderseknert]

I'm not able to reproduce this. @JinXiu2023 what command are you running to get this?

"Error Evaluating." does not look like something OPA would output. Is this Gatekeeper or some other app embedding OPA? Some of them disable built-ins like http.send.

[JinXiu2023]

@srenatus Thank you, but this doesn't work either.
@anderseknert I use The Rego Playground to evaluate the policy. You could have a try to reproduce the error.

[anderseknert]

Yep, http.send is not supported on the Rego Playground for security reasons. If you run your policy using opa eval it should work just fine.

[JinXiu2023]

Ok. Thank you and I will have a try.