parse-community / parse-community/parse-server
Add SecurityChecks for masterKeyIps
Open
Nobody has claimed this yet.
type:feature
- Dominant language
- JavaScript
- Stars
- 21.4k
- Forks
- 4.8k
- Avg merge
- 7h 45m
- Merged PRs (30d)
- 11
Description
New Feature / Enhancement Checklist
- I am not disclosing a vulnerability.
- I am not just asking a question.
- I have searched through existing issues.
Current Limitation
masterKeyIps is a Parse Server configuration to limit the IPs that attempt to use masterKey.
Feature / Enhancement Description
Add security check to make sure masterKeyIps is configured
Example Use Case
n/a
Alternatives / Workarounds
n/a
3rd Party References
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the Parse Server configuration and security-check entry points that handle masterKeyIps. Clarify what “configured” means and the expected failure behavior, then add coverage showing the check passes or rejects configuration accordingly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, nodejs
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100