We don't need a restful JSON API at this point (except for /events?date=foo) so I would remove most of the jbuilders. This is especially important for any of the create endpoints as there is no security on those and would be a easy attack for a robot/mean engineering student (or maybe both at the same time).
We don't need a restful JSON API at this point (except for
/events?date=foo
) so I would remove most of the jbuilders. This is especially important for any of the create endpoints as there is no security on those and would be a easy attack for a robot/mean engineering student (or maybe both at the same time).