Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-59568

Shell's EncryptedDBClientBase class breaks encapsulation of the scripting engine

    XMLWordPrintableJSON

Details

    • Icon: Improvement Improvement
    • Resolution: Unresolved
    • Icon: Major - P3 Major - P3
    • None
    • None
    • None
    • None
    • Server Security

    Description

      Use of JS scripting facilities is intended to be made via the interfaces in src/mongo/scripting, insulating clients from details of the particular scripting engine in use. However, the shell's EncryptedDBClientBase class bypasses this interface and reaches directly down to the MozJS specific scripting implementations. This should be revisited so that the shell is not tied to details of the particular scripting provider.

      Attachments

        Activity

          People

            backlog-server-security Backlog - Security Team
            andrew.morrow@mongodb.com Andrew Morrow (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated: