apache / nano

Nano is now part of Apache CouchDB. Repo moved to https://GitHub.com/apache/couchdb-nano
https://github.com/apache/couchdb-nano
Other
1.13k stars 157 forks source link

Validate docName parameter to avoid db delete #324

Closed magickang closed 8 years ago

magickang commented 8 years ago

Using the document destroy api it's currently possible if doc id and rev is null/undefined to delete the db. Couchdb handles the case where doc is null but a rev id is passed in and the case where doc is passed in but no rev, however nothing protects you on couchdb when both those parameters are undefined.

jo commented 8 years ago

Thanks!