[Koha-bugs] [Bug 28999] Add Koha::AllowList, DenyList and Koha::Object::ColumnSet

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28999

--- Comment #7 from David Cook <dcook at prosentient.com.au> ---
I spent a lot of time thinking this morning, and I'm not sure I see a purpose
for filtering outbound data besides for the public API. 

And on the flipside the API has its own input validation so it wouldn't need an
inbound data filter whereas the HTML UI does. 

I just wonder if we're trying to make this all too generic/comprehensive. The
original premise was just filtering input from HTML forms. 

Maybe it makes more sense to do a RFC? I think this might be the 3rd or 4th
report now for allow lists.

-- 
You are receiving this mail because:
You are watching all bug changes.