[SERVER-12387] Do not validate (objcheck) DirectClient calls Created: 17/Jan/14  Updated: 11/Jun/15  Resolved: 11/Jun/15

Status: Closed
Project: Core Server
Component/s: Internal Code
Affects Version/s: None
Fix Version/s: None

Type: Improvement Priority: Minor - P4
Reporter: Scott Hernandez (Inactive) Assignee: Andy Schwerin
Resolution: Won't Fix Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Backwards Compatibility: Fully Compatible
Participants:

 Comments   
Comment by Andy Schwerin [ 11/Jun/15 ]

The current goal is to remove DBDirectClient per SERVER-17419, so I'm going to close this "Won't Fix".

Comment by Scott Hernandez (Inactive) [ 13/Feb/14 ]

It has already been checked, when initially sent by the user. By the time
we call internally using a directclient the user data has been checked and
is valid bson, and if constructed from our code then that is another thing.

Mostly thinking about findAndModify and aggregation.

Comment by Andy Schwerin [ 17/Jan/14 ]

Why not? They often involve user data, that may be tainted.

Generated at Thu Feb 08 03:28:24 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.