You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
In order to implement security for an application that uses this package, a lot needs to be done, for instance, masking or obscuring the ID from the URL where it could easily be read as a DB entry.
An easy way to do it is to add UUID fields (type 4, for example uuid.uuid4()) into every model of the package.
Describe the solution you'd like
Adding a UUID field to every model it would be easier to implement and "obscure" attempts of adultering the message in between.
Which benefits it would bring? Well, we don't need to inherit directly from the model to create our own just to add that field, instead, we could use it as a proxy table and that's it, the module could and can be upgraded minimizing the risk of breaking the inherited model as it lives in isolation as well we could protect the URLs with a more "non-understandable" identifier.
Is your feature request related to a problem? Please describe.
In order to implement security for an application that uses this package, a lot needs to be done, for instance, masking or obscuring the ID from the URL where it could easily be read as a DB entry.
An easy way to do it is to add UUID fields (type 4, for example
uuid.uuid4()
) into every model of the package.Describe the solution you'd like
Adding a UUID field to every model it would be easier to implement and "obscure" attempts of adultering the message in between.
Which benefits it would bring? Well, we don't need to inherit directly from the model to create our own just to add that field, instead, we could use it as a proxy table and that's it, the module could and can be upgraded minimizing the risk of breaking the inherited model as it lives in isolation as well we could protect the URLs with a more "non-understandable" identifier.
So in every model it would be like this:
Describe alternatives you've considered
The text was updated successfully, but these errors were encountered: