Closed dermitzos closed 5 years ago
Τhis is a really meaningful enhancement tha needs to be done!
I think it's necessary at least for the pages that are public (add, search pages, not the configuration)
I tottaly agree. But if it's not a big overhead it would be better to drop off permanently the public endpoint.
Important issue. Must examine possible options/workarounds. Also ask other people (Rousakis etc)
This is a big update to be done.
Currently, all the sparql queries that are being made, are created through javascript and query the REST endpoint of Blazegraph (through the module). This means that it would be possibly not secure on any attacks, as there is not any filtering/checking of the queries.
The proposal is to create an "RESTful API" on the module/server side to create/handle the queries that the .js files would make the requests, without leaving an open endpoint to the world