[SERVER-13954] noscripting configuration option not available in YAML configuration file Created: 15/May/14 Updated: 11/Mar/15 Resolved: 16/May/14 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Admin |
| Affects Version/s: | 2.6.0 |
| Fix Version/s: | 2.6.2, 2.7.1 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Jon Rangel (Inactive) | Assignee: | Shaun Verch |
| Resolution: | Done | Votes: | 1 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||
| Backwards Compatibility: | Fully Compatible | ||||||||||||
| Operating System: | ALL | ||||||||||||
| Backport Completed: | |||||||||||||
| Sprint: | Server 2.7.1 | ||||||||||||
| Participants: | |||||||||||||
| Description |
|
Issue Status as of May 29, 2014 ISSUE SUMMARY USER IMPACT WORKAROUNDS AFFECTED VERSIONS FIX VERSION RESOLUTION DETAILS Original descriptionThere's no way to disable server-side JavaScript using the new YAML configuration file format. |
| Comments |
| Comment by Githook User [ 20/May/14 ] | ||
|
Author: {u'name': u'Shaun Verch', u'email': u'shaun.verch@mongodb.com'}Message: Conflicts: | ||
| Comment by Githook User [ 16/May/14 ] | ||
|
Author: {u'name': u'Shaun Verch', u'email': u'shaun.verch@mongodb.com'}Message: | ||
| Comment by Eliot Horowitz (Inactive) [ 15/May/14 ] | ||
|
Security seems reasonable. | ||
| Comment by Eric Milkie [ 15/May/14 ] | ||
|
eliot should this go under "security" in the new config file format? That's the only top level category that is somewhat appropriate:
Alternatively, we can put it at the top level by itself. Also, we could say "javascriptEnabled" rather than "scriptingEnabled" if that seems clearer. | ||
| Comment by Eliot Horowitz (Inactive) [ 15/May/14 ] | ||
|
I don't think I would have recommended leaving it out. | ||
| Comment by Eric Milkie [ 15/May/14 ] | ||
|
eliot Shaun thinks we left this out of the new YAML config file on purpose – do you remember why? | ||
| Comment by Eric Milkie [ 15/May/14 ] | ||
|
I don't recall why we left this one out of the new format. |