Do not stringify object rows, skip over them instead about react-dynamic-data-table HOT 6 OPEN

Some advantages of the current behaviour is that it is obvious what is present within the field, and makes it easier to implement a DataItemManipulator callback.

A possibly disadvantage @dextermb brought up is that if a relationship is added to a model, its content, which could contain private information, would be immediately rendered in the table.

Ideally, we should output something that makes it obvious the column is not empty, but does not reveal private information. Perhaps we could blank out all values, or replace their content with asterisks, leaving the keys intact, then stringify as is?

from react-dynamic-data-table.

Some advantages of the current behaviour is that it is obvious what is present within the field, and makes it easier to implement a DataItemManipulator callback.

A possibly disadvantage @dextermb brought up is that if a relationship is added to a model, its content, which could contain private information, would be immediately rendered in the table.

Ideally, we should output something that makes it obvious the column is not empty, but does not reveal private information. Perhaps we could blank out all values, or replace their content with asterisks, leaving the keys intact, then stringify as is?

Perhaps we go through and make the values undefined or null. Maybe even <redacted>.

⚠️ Although it is worth mentioning that they would be able to find the data through window.<object> or in the network tab.

from react-dynamic-data-table.

Extra thoughts, @NilesB @JacobBrassington @wheatleyjj @ash123456789

from react-dynamic-data-table.

Shouldn't data that should be redacted never make it to the front end?

from react-dynamic-data-table.

Shouldn't data that should be redacted never make it to the front end?

This issue is, that if someone were to use with on a Laravel model, then the relationship would appear everywhere and magically appear on the frontend.

from react-dynamic-data-table.

@JacobBrassington You're very right, it shouldn't. The functionality being discussed is just an extra fail safe to ensure that even if it does somehow reach the frontend, it is not immediately displayed to casual users.

from react-dynamic-data-table.