Pushdata operations that are not minimally encoded are non-standard since Bitcoin Core 0.9.
My question is: how is this check performed? From reading the source code it seems that it is performed only on executed branches of the script, but it seems not quite right. It would have made more sense to me if it were performed either on the entire script or only on the scriptSig, since malleability of pushdata operations in the scriptSig is what prompted for the check in the first place.
Am I wrong?