> On 05 May 2015, at 15:14, Giovanni Lenzi <[email protected]> wrote:
> 
>> That happens in a proxy outside of CouchDB then?
> 
> No, it happens in the changes filter of the design document.

You cannot force a client to use a filter. CouchDB has no way of blocking 
requests to _changes that have no filter parameter. If you are not doing that 
in a proxy, your system is not secure.

Best
Jan
-- 
Professional Support for Apache CouchDB:
http://www.neighbourhood.ie/couchdb-support/

Reply via email to