[SERVER-59136] Split shell specific logic from "scripting" library Created: 05/Aug/21  Updated: 06/Dec/22

Status: Backlog
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: Task Priority: Major - P3
Reporter: Spencer Jackson Assignee: Backlog - Security Team
Resolution: Unresolved Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
is related to SERVER-59135 Make mongocryptd targets in MSIs depe... Closed
Assigned Teams:
Server Security
Participants:

 Description   

The "scripting" library target provides the functionality needed to evaluate JavaScript in the server and the shell. Some functionality in it is specific to the shell, such as that needed to establish outbound server connections. Though controls exist to prevent servers from invoking this logic, this does result in some portions of networking and authentication code being linked into the library, and included in server-side consumers and artifacts.

We should split the shell specific logic out from the library, and include it into the shell directly.


Generated at Thu Feb 08 05:46:27 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.