[SERVER-48780] bulkWrite() in mongo shell does not check updates start with '$' and replacements do not Created: 15/Jun/20 Updated: 19/Jun/23 Resolved: 19/Jun/23 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Shell |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Max Hirschhorn | Assignee: | [DO NOT ASSIGN] Backlog - Server Development Platform Team (SDP) (Inactive) |
| Resolution: | Won't Do | Votes: | 0 |
| Labels: | move-stm, sdp-backlog-purge | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||
| Assigned Teams: |
Server Development Platform
|
||||||||||||||||
| Operating System: | ALL | ||||||||||||||||
| Steps To Reproduce: | The following should all throw a JavaScript exception without executing the command on the server:
|
||||||||||||||||
| Participants: | |||||||||||||||||
| Description |
|
DBCollection.prototype.replaceOne() validates the replacement document contains at least one non-$operator field. DBCollection.prototype.updateOne() and DBCollection.prototype.updateMany() validate the update object contains at least one $operator field. However, none of replaceOne, updateOne, or updateMany in DBCollection.prototype.bulkWrite() do the same. |
| Comments |
| Comment by Alex Neben [ 19/Jun/23 ] |
|
This has been identified as work that the SDP team won't do in the near term. Please reopen with a comment if you feel this work should be reprioritized and explain why. |
| Comment by Steven Vannelli [ 10/May/22 ] |
|
Moving this ticket to the Backlog and removing the "Backlog" fixVersion as per our latest policy for using fixVersions. |