Skip to content

Conversation

kunalmestri9
Copy link

Fixing issue #144

As issue mentioned from the DELETE method you were able to delete entire collection data just by skipping the OBJECT ID in the URL

Fix it in both handlers PUT and DELETE. Now for PUT and DELETE request.params.id is mandatory if not it will throw 400 [bad request]

However for development purpose and any other such reasons I have kept a parameter in

defaults.isSecureDelete=true

which can be overridden at the time of the model creation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant