solid-spec icon indicating copy to clipboard operation
solid-spec copied to clipboard

Remove SPARQL on GET

Open RubenVerborgh opened this issue 6 years ago • 5 comments
trafficstars

  • it’s a bad idea for scalability, DOS, and other reasons
  • it’s not implementable the way it is written (subset not defined)
  • it’s not implemented or used anywhere as far as we know

I strongly favor removal over deprecation (#205).

RubenVerborgh avatar Jul 24 '19 17:07 RubenVerborgh

👍

dmitrizagidulin avatar Jul 24 '19 18:07 dmitrizagidulin

Looks like two members of the query panel already agree on this so could be a quick decision :) cc @kjetilk @justinwb.

michielbdejong avatar Jul 24 '19 18:07 michielbdejong

@dmitrizagidulin Thanks, could you do that as a review, too? 🙂

@michielbdejong Not sure what part of process to follow here, given that this is not a normative section. We might or might not need a week for the public and approval by three editors; also unsure if I can merge. Assigning to you; feel free to unassign.

RubenVerborgh avatar Jul 24 '19 18:07 RubenVerborgh

Actually, I am a bit conflicted, since I could see how it could be implemented easily, and I'm not sure very extensive edits are needed to the document at this point as we restart from scratch. It might just stay there for historical reasons. But OTOH, since it hasn't been implemented and has problems, it can be removed just fine too.

kjetilk avatar Jul 30 '19 13:07 kjetilk

@kjetilk The issue is that, whatever is in solid-spec, will end up in vNext; the only option to not have a feature end up in vNext is to remove it from solid-spec. So my main reason for creating this PR is to ensure that vNext does not have this security hole in it.

RubenVerborgh avatar Jul 30 '19 14:07 RubenVerborgh