数据库与存储
mongodb-schema-security
更新于 2026-09-25
MongoDB · 安全规则
Security rules for MongoDB: boundary validation, server-side authorisation and zero secret leakage.
- 技术栈
- MongoDB
- 主题
- 安全
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Validate and normalise every input at the boundary it enters the system
- ✓ Authorise on the server against the authenticated principal, never on client claims
- ✓ Keep secrets out of repositories, logs and error messages
✕ 常见反模式
- ✕ Trusting headers or parameters that a client can set freely
- ✕ Disabling TLS verification or CSRF protection to unblock a test
- ✕ Wide-scope tokens with no expiry
◎ 交付前验证
- ◎ EXPLAIN on the hot queries shows no sequential scan regression
- ◎ Migration rehearsed on a production-size snapshot
- ◎ Rollback path executed at least once in staging
同分类条目
26 篇数据库与存储
PostgreSQL 工程规则
Zero-downtime PostgreSQL rules: expand/contract phases and concurrent index builds
数据库与存储
MySQL 工程规则
MySQL rules: online DDL awareness, lock timeouts and reversible migrations
数据库与存储
Redis 工程规则
Redis rules: explicit TTLs, versioned keys and stampede-safe misses
数据库与存储
MongoDB 工程规则
MongoDB rules: explicit schema validators and index-backed query shapes
数据库与存储
ClickHouse 工程规则
ClickHouse rules: partition pruning, column ordering and batch inserts
数据库与存储
Elasticsearch 工程规则
Elasticsearch rules: alias-based reindexing and mapping compatibility