crud-json-api

crud-json-api copied to clipboard

``` if (!$this->controller->getRequest()->accepts('application/vnd.api+json')) { return parent::_outputMessage($template); } ``` This assumes that the usage of this renderer can only apply to jsonapi requests. However, this makes it somewhat inflexible. It might...

geoidesic

Bump jinja2 from 2.11.3 to 3.1.3 in /docs

1

Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.3 to 3.1.3. Release notes Sourced from jinja2's releases. 3.1.3 This is a fix release for the 3.1.x feature branch. Fix for GHSA-h5c8-rqwp-cp95. You are affected if...

dependabot[bot]

It's easy for querystring parameters to accidentally include whitespace (via copy / paste etc.) which can make it hard to debug. This would be easily checked for in this function...

geoidesic

Bump certifi from 2022.12.7 to 2023.7.22 in /docs

1

Bumps [certifi](https://github.com/certifi/python-certifi) from 2022.12.7 to 2023.7.22. Commits 8fb96ed 2023.07.22 afe7722 Bump actions/setup-python from 4.6.1 to 4.7.0 (#230) 2038739 Bump dessant/lock-threads from 3.0.0 to 4.0.1 (#229) 44df761 Hash pin Actions and...

dependabot[bot]

Bump pygments from 2.7.4 to 2.15.0 in /docs

1

Bumps [pygments](https://github.com/pygments/pygments) from 2.7.4 to 2.15.0. Release notes Sourced from pygments's releases. 2.15.0 Added lexers: Carbon (#2362, #2365, #2366, #2367, #2368, #2369, #2370) Dax (#2335, #2345) MediaWiki Wikitext (#2373, #827)...

dependabot[bot]

E.g. ``` {{protocol}}{{domain}}/api/people/3c9b642a-6682-4b7a-aff2-1928371923719?fields[people]=role&include=role ``` This will not include any data and currently produces the same result as this query: ``` {{protocol}}{{domain}}/api/people/3c9b642a-6682-4b7a-aff2-1928371923719?fields[people]=role ``` Which means that there is no way currently...

geoidesic

Requests without a body are not required by the JSONAPI spec to have Content-Type header set. However this method does. This is not correct for requests that do not contain...

geoidesic

Otherwise the requests will exponentially large as the data grows. https://discuss.jsonapi.org/t/excluding-relationships/649/2

geoidesic

This results in a. CORS error message instead of the expected validation error messages: Here's the stack trace: ``` 2022-01-01 19:40:07 Error: [Crud\Error\Exception\ValidationException] 6 validation errors occurred in /Users/noeldacosta/repo/github/mnr-be/vendor/friendsofcake/crud/src/Listener/ApiListener.php on...

geoidesic

Potential security issue

2

Hey! We have discovered a potential security issue with `crud-json-api`, what's the best way to get in touch to investigate?

egeriis