meilisearch / meilisearch/meilisearch-ruby
ActiveRecord-like sanitization on filter
Nobody has claimed this yet.
- Dominant language
- Ruby
- Stars
- 224
- Forks
- 54
- PR merge metrics
- No merged PRs in 30d
Description
While Meilisearch is not meant to be a database in the traditional sense, I think it's possible for sensitive data to end up in indexes.
I think we should support sanitized parameters in methods like filter, similar to ActiveRecord, by having ? and ?<number> as placeholders and successive arguments that fill in the placeholders.
This issue is just as stub for high level discussion, since I would like to research how ActiveRecord does it before talking about implementation details.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading ActiveRecord's parameter sanitization and the SDK's existing filter methods. This issue is only a high-level discussion stub, so first establish how ? and ?<number> placeholders should consume successive arguments before proposing implementation details. Done means the behavior and scope are agreed, not merely that code is written.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ruby
- Domain
- api, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100