Skip to content
This repository has been archived by the owner on Nov 5, 2018. It is now read-only.

Validate docName parameter to avoid db delete #324

Merged
merged 1 commit into from
May 16, 2016
Merged

Conversation

magickang
Copy link

@magickang magickang commented Apr 25, 2016

Using the document destroy api it's currently possible if doc id and rev is null/undefined to delete the db. Couchdb handles the case where doc is null but a rev id is passed in and the case where doc is passed in but no rev, however nothing protects you on couchdb when both those parameters are undefined.

@jo jo merged commit b41279f into apache:master May 16, 2016
@jo
Copy link
Contributor

jo commented May 16, 2016

Thanks!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants