Google mentions some vulnerabilities when working with Namespaces:

Note: An application that reads Keys, or other namespace-aware
objects, from untrusted sources (like the web browser client)
introduces security vulnerabilities. Applications that rely on keys
from untrusted sources must incorporate a security layer verifying
that the current user is authorized to access the requested
namespace.
http://code.google.com/intl/cs/appengine/docs/python/multitenancy/multitenancy.html#Using_Namespaces_with_the_Datastore

I'm not sure if I understand it correctly. What kind of
vulnerabilities does Google mean? Could you provide me some example,
what should I be careful about?

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to