cloudant / python-cloudant

A Python library for Cloudant and CouchDB
Apache License 2.0
163 stars 55 forks source link

Add validation for doc ID and attachment names #507

Closed ricellis closed 3 years ago

ricellis commented 3 years ago

Checklist

Description

Add validation for doc ID and attachment names

1. Steps to reproduce and the simplest code sample possible to demonstrate the issue

Use an invalid document ID or attachment name.

2. What you expected to happen

The request to fail.

3. What actually happened

The request is passed to the server.

Approach

Add validation to functions that access document IDs or attachments to prevent clash with system paths.

Schema & API Changes

Security and Privacy

Testing

Monitoring and Logging