search

isl / PressModuleV2

New version of drupal PRESS Module customized for FORTH
0 stars 0 forks source link

Change all queries to an API #42

Closed dermitzos closed 5 years ago

dermitzos commented 5 years ago

This is a big update to be done.

Currently, all the sparql queries that are being made, are created through javascript and query the REST endpoint of Blazegraph (through the module). This means that it would be possibly not secure on any attacks, as there is not any filtering/checking of the queries.

The proposal is to create an "RESTful API" on the module/server side to create/handle the queries that the .js files would make the requests, without leaving an open endpoint to the world

hrysakis commented 5 years ago

Τhis is a really meaningful enhancement tha needs to be done!

dermitzos commented 5 years ago

I think it's necessary at least for the pages that are public (add, search pages, not the configuration)

hrysakis commented 5 years ago

I tottaly agree. But if it's not a big overhead it would be better to drop off permanently the public endpoint.

DimitrisAgelakis commented 5 years ago

Important issue. Must examine possible options/workarounds. Also ask other people (Rousakis etc)