John A Meinel <j...@arbash-meinel.com> writes:

> So I tried this patch:
> === modified file 'testing/mgo.go'
> --- testing/mgo.go    2013-11-06 13:38:01 +0000
> +++ testing/mgo.go    2013-12-18 06:23:25 +0000
> @@ -99,6 +99,7 @@
>               "--noprealloc",
>               "--smallfiles",
>               "--nojournal",
> +             "--noscripting",
>               "--nounixsocket",
>       }
>       server := exec.Command("mongod", mgoargs...)
>
>
> And with it, the test suite still passes 100% for me.

\o/

> So I have a strong feeling that --noscripting does what we want it to,
> and that we don't, indeed, need the ability.
>
> I'm not sure what test Michael had seen that used something that needed
> scripting, but I'm running against mongodb 2.2.4 and it seems to be
> working with --noscripting set up.

It was state/machine_test.go and state/unit_test.go (search for
$where).  But on looking, the tests might actually be testing that
queries like this are filtered out or something -- avoiding the
equivalent of an SQL injection?  Not really sure.

Thanks heaps for testing this.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1261452

Title:
  juju-core is unavailable for arm64

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1261452/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to