News for hackers. Stuff that matters.

A comment on Show HN: Tampon - an open source Buffer app. Parent comment

Re:Show HN: Tampon - an open source Buffer app by julien_c on Thursday September 06, 2012 @12:59PM (#4485075)
You're right. But the worst thing that can happen is someone POSTs large fake objects and tries to flood my server's hard drive. Which, given the max size of a POST's data will take quite some time :)

The API only allows querying posts on the current user (with now user input) so there's no risk of "NoSQL injection": https://github.com/julien-c/Tampon/blob/master/api/posts.php

[ Parent | on HN ]
Re:Show HN: Tampon - an open source Buffer app by NathanKP on Thursday September 06, 2012 @01:34PM (#4485241)
I see. I would still recommend JSON schema, though. It is great for debugging and ideal if you plan to open the API up to third party developers, because it makes it easy to ensure that all NoSQL data adheres to a proper schema, and it also provides meaningful error messages if a third party developer accidentally sends badly structured JSON to your service, or even if you accidentally send badly structured JSON to your service due to a front end bug.

I use this JSON Schema validator with great success: http://packagist.org/packages/hasbridge/json-schema-validato...

[ Parent | on HN ]