cloudant / nodejs-cloudant

Cloudant Node.js client library

Apache License 2.0

255 stars 90 forks source link

Prepare 4.5.0 release #461

Closed ricellis closed 3 years ago

ricellis commented 3 years ago

Proposed 4.5.0 release

Changes

4.5.0 (2021-08-26)

[IMPROVED] - Document IDs and attachment names are now rejected if they could cause an unexpected Cloudant request. We have seen that some applications pass unsantized document IDs to SDK functions (e.g. direct from user requests). In response to this we have updated many functions to reject obviously invalid paths. However, for complete safety applications must still validate that document IDs and attachment names match expected patterns.