search

wolf4ood / gremlin-rs

Gremlin Rust
Apache License 2.0
108 stars 30 forks source link

Usage with Aws Neptune #142

Open xD3CODER opened 3 years ago

xD3CODER commented 3 years ago

Hello,

I'm new in gremlin/tinkerpop ecosystem.

I'm trying to use this lib with an AWS Neptune instance. According to the doc, Neptune does not support bindings property. Is there a way to use the lib with Neptune despite this limitation ?

maldrake commented 3 years ago

@xD3CODER,

It is possible. In fact, I'm doing so today for one project -- not production yet, but we're up in a staging environment running against AWS Neptune successfully. Because we couldn't use bindings, we ended up directly substituting variable values into the query text itself. This is a terrible work-around, but we didn't see an alternative given Neptune's limitations. You have to be extremely careful to do input validation and sanitization yourself, though, because you're at risk of gremlin injection attacks when not using bindings to parameterize queries.

xD3CODER commented 3 years ago

@maldrake Thanks for your anwser, indeed, it's not optimal but I had not thought about it, I will solve my few incompatibility problems with this method, thanks!