René's URL Explorer Experiment

Title: Finders should return nil instead of raising security violations · Issue #117 · hyperstack-org/hyperstack · GitHub

Open Graph Title: Finders should return nil instead of raising security violations · Issue #117 · hyperstack-org/hyperstack

X Title: Finders should return nil instead of raising security violations · Issue #117 · hyperstack-org/hyperstack

Description: For example consider: Customers.find_by_handle('catmando') if 'catmando' exists but the client does not have permission to view the data it will throw an error. if 'catmando' does not exist it will just return nil. so a hacker could use ...

Open Graph Description: For example consider: Customers.find_by_handle('catmando') if 'catmando' exists but the client does not have permission to view the data it will throw an error. if 'catmando' does not exist it will...

X Description: For example consider: Customers.find_by_handle('catmando') if 'catmando' exists but the client does not have permission to view the data it will throw an error. if 'catmando'...

Opengraph URL: https://github.com/hyperstack-org/hyperstack/issues/117

X: @github

direct link

Domain: github.com

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Finders should return nil instead of raising security violations","articleBody":"For example consider:\r\n\r\n`Customers.find_by_handle('catmando')`\r\n\r\nif 'catmando' exists but the client does not have permission to view the data it will throw an error.\r\n\r\nif 'catmando' does not exist it will just return nil.\r\n\r\nso a hacker could use this to easily check if specific data exists or not.\r\n\r\nSolution is just to return nil always unless the client has permission to view at least one attribute in the record.","author":{"url":"https://github.com/catmando","@type":"Person","name":"catmando"},"datePublished":"2019-01-28T16:49:29.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/117/hyperstack/issues/117"}

Links:

Viewport: width=device-width