Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allowing arbitrary strings #6

Closed
progval opened this issue Mar 22, 2015 · 1 comment
Closed

Allowing arbitrary strings #6

progval opened this issue Mar 22, 2015 · 1 comment

Comments

@progval
Copy link
Contributor

progval commented Mar 22, 2015

I am willing to use this library to allow users (unauthenticated) to input arbitrary selectors and json data.

Is there any way they can use it to make the script use a lot of resources?

If yes, can you make it safe? Or add an option to allow only a restricted but safe subset of the selector language?
If no, can you state it somewhere in the readme, so others know about it?

Thanks!

@mwhooker
Copy link
Owner

I don't know what the resource usage would look like in pathological cases. This is perhaps something you could limit on the OS. For example, see http://coldattic.info/shvedsky/pro/blogs/a-foo-walks-into-a-bar/posts/40

Unfortunately I'm no longer maintaining this project, since the jsonselect umbrella org seems abandoned, and there are plenty of other solutions (see #1 (comment)). I'll make sure to update the README to reflect the current state

You can email me if you want to discuss professional services.

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants