-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Disable list of commands from playground repositories #897
Comments
hey can you assign this to me? |
@yashbudhia assigned, thanks for contributing. Please note the changes will be part of both DiceDB playground frontend repo and backend repo. |
Thanks for assigning, So i have to open pull requests in those repos right? |
Yes |
@lucifercr07 I would like to work on this issue could you please assign it to me |
Frontend changes merged as part of DiceDB/alloy#19 |
I have also added blacklisted commands in the backend repo - DiceDB/playground-mono#23 |
Closing, merged as part of DiceDB/playground-mono#23 |
Description
DiceDB Playground is an interactive platform that allows users to experiment with DiceDB commands in a live environment, similar to the Go Playground. Users will be able to submit and execute commands directly through a web interface. The initial implementation will focus on enabling users to search for and trigger commands.
For more details about DiceDB playground you can check here.
To enhance the security of our application, we need to implement a blacklist for certain commands that could potentially lead to data loss or unauthorized access. This blacklist should be enforced in both the backend and frontend components of our application.
Add following commands for blacklisting:
FLUSHALL
FLUSHDB
DUMP
ABORT
AUTH
CONFIG
SAVE
BGSAVE
BGREWRITEAOF
RESTORE
MULTI
EXEC
DISCARD
QWATCH
QUNWATCH
LATENCY
CLIENT
SLEEP
PERSIST
Note: Implementation will be part of both DiceDB playground frontend repo and backend repo.
Tasks
-
(error) ERR unknown command '<COMMAND_NAME>'The text was updated successfully, but these errors were encountered: