Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Separate RESTful and SOAP APIs in DataObject::$api_access #2

Closed
chillu opened this issue Jul 17, 2012 · 1 comment
Closed

Separate RESTful and SOAP APIs in DataObject::$api_access #2

chillu opened this issue Jul 17, 2012 · 1 comment

Comments

@chillu
Copy link
Member

chillu commented Jul 17, 2012

Migrated from http://open.silverstripe.org/ticket/3727
$api_access = true is a bit simplistic, there should be a way to determine which API to enable. This is desireable to limit service exposure (attack surface) and general debugging for a specific implementation (most devs would gladly just support one API without worrying about implications of the other one).
@robbieaverill
Copy link
Contributor

The $api_access static now accepts variable configuration options: https://github.com/silverstripe/silverstripe-restfulserver/tree/1.0.5#configuration

Closing - feel free to reopen if this is still affecting somebody.

robbieaverill added a commit that referenced this issue Jun 11, 2019
@robbieaverill
Merge pull request #2 from silverstripe-security/pulls/1.0/sort-only-…
c7ad63d 
…on-fields

[CVE-2019-12149] Fixed potential SQL injection vulnerability in RestfulServer
@phptek phptek mentioned this issue Feb 1, 2023
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@chillu @robbieaverill