[SERVER-9131] Ensure documents with code elements do not conflict with internal JS functions Created: 25/Mar/13  Updated: 03/Apr/19  Resolved: 19/Feb/16

Status: Closed
Project: Core Server
Component/s: JavaScript, Security
Affects Version/s: 2.4.1
Fix Version/s: 3.2.4, 3.3.2

Type: Bug Priority: Major - P3
Reporter: Ben Becker Assignee: Rahul Dhodapkar
Resolution: Done Votes: 0
Labels: code-and-test
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
is depended on by SERVER-23472 Enable JavaScript protection by default Closed
Documented
is documented by DOCS-7207 Document new JavaScript protection sh... Closed
Duplicate
is duplicated by SERVER-13276 Overriding JS methods via the shell Closed
Related
related to DOCS-7207 Document new JavaScript protection sh... Closed
related to SERVER-22397 Make shell JS marshalling protection ... Closed
related to SERVER-23591 Avoid using rawMongoProgramOutput() i... Closed
is related to SERVER-21740 Shell can't print invalid or native f... Closed
is related to SERVER-3391 CodeWScope support in javascript shell Closed
Backwards Compatibility: Minor Change
Operating System: ALL
Backport Completed:
Participants:

 Description   

When a document is returned to the shell, handle the case where stored function names conflict with prototype function names.



 Comments   
Comment by Githook User [ 24/Feb/16 ]

Author:

{u'username': u'kaloianm', u'name': u'Kaloian Manassiev', u'email': u'kaloian.manassiev@mongodb.com'}

Message: SERVER-9131 Fix lint failed checks

(cherry picked from commit 808fc26a78c1c0132019768a24c1060f56e4b7f2)
Branch: v3.2
https://github.com/mongodb/mongo/commit/57806ce43bf5c529162f1ccfea139043444fcb40

Comment by Githook User [ 24/Feb/16 ]

Author:

{u'username': u'rahuldhodapkar', u'name': u'rahuldhodapkar', u'email': u'rahul.m.dhodapkar@gmail.com'}

Message: SERVER-9131 prevent automatic function marshalling in shell

add shell flag --enableJavaScriptProtection and server setParameter javascriptProtection

(cherry picked from commit 054d07ae6bcbc4eb408c1d7ba070b4dccdaa9cd3)
Branch: v3.2
https://github.com/mongodb/mongo/commit/80ce9795b518b741a5e9236224a50db00abd7096

Comment by Githook User [ 18/Feb/16 ]

Author:

{u'username': u'kaloianm', u'name': u'Kaloian Manassiev', u'email': u'kaloian.manassiev@mongodb.com'}

Message: SERVER-9131 Fix lint failed checks
Branch: master
https://github.com/mongodb/mongo/commit/808fc26a78c1c0132019768a24c1060f56e4b7f2

Comment by Githook User [ 17/Feb/16 ]

Author:

{u'username': u'rahuldhodapkar', u'name': u'rahuldhodapkar', u'email': u'rahul.m.dhodapkar@gmail.com'}

Message: SERVER-9131 prevent automatic function marshalling in shell

add shell flag --enableJavaScriptProtection and server setParameter javascriptProtection
Branch: master
https://github.com/mongodb/mongo/commit/054d07ae6bcbc4eb408c1d7ba070b4dccdaa9cd3

Generated at Thu Feb 08 03:19:28 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.