Skip to content

Use JSON field & validator instead of save to db? #31

Description

@ninadicara

Need to explore this but there is definitely a possibility that there are security risks associated with saving the key values of the json file directly to the database. At the moment the JSON keys must match the expected database fields to prevent just submitting random json, but is it possible for someone to submit a value that compromised the database ?

Would it be safer to use a JSON field, that is validated against a JSON schema before being saved?
https://stackoverflow.com/questions/37642742/django-postgresql-json-field-schema-validation

Metadata

Metadata

Labels

questionFurther information is requested

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions