这是indexloc提供的服务,不要输入任何密码
Skip to content

Be stricter when converting user-supplied JSON values to BSON #44

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Apr 22, 2024

Conversation

dmoverton
Copy link
Contributor

@dmoverton dmoverton commented Apr 17, 2024

Describe your changes

If we don't know the correct BSON scalar type for a user-supplied value then refuse to convert it from JSON to BSON. This prevents the user inserting arbitrary values where a scalar value is expected.

Issue ticket number and link

MDB-112

Type

(Select only one. In case of multiple, choose the most appropriate)

  • highlight
  • enhancement
  • bugfix
  • behaviour-change
  • performance-enhancement
  • security-fix

@dmoverton dmoverton marked this pull request as draft April 17, 2024 13:05
@dmoverton dmoverton marked this pull request as ready for review April 22, 2024 12:44
@dmoverton dmoverton requested a review from hallettj April 22, 2024 12:45
Copy link
Collaborator

@hallettj hallettj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

@dmoverton dmoverton merged commit 992f466 into main Apr 22, 2024
@dmoverton dmoverton deleted the dmoverton/mdb-20/prevent-injection branch April 22, 2024 21:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants