andrewborell edited a comment on issue #1479: _all_docs?key returns all 
documents when the value is not string.
URL: https://github.com/apache/couchdb/issues/1479#issuecomment-498330929
 
 
   I just observed this behavior in the same version with a POST request by 
dumping an unexpected key in the JSON body. The response returns every record 
in the database!!!  I'm not sure what is more insane: This issue hasnt received 
any attention, or that it exists in the first place.  
   
   **WHEN A QUERY IS MADE WITH AN INVALID SELECTOR OR FILTERING PARAMS THE 
REQUEST SHOULD GET DROPPED WITH A 400 BAD REQUEST MESSAGE.**  
   
   It is one thing if the values do not exist but when the keys are unexpected 
and the request returns the entire database, that is a MAJOR problem. 
   
   Given the severity of this issue I am very concerned that no one has 
responded to this matter in almost a year.  Should we be abandoning couchdb for 
business purposes or development is silently addressing the issue? I cannot 
think of a practical application where this issue would not be a major concern. 
 

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to