Removed default search and ordering filters.

Removed the default search filter because django-admin-like FTS is not
something we want.

Removed the default ordering filter because it enables ordering by all
fields by default which can result in security issues.

Change-Id: I4438d592982a61a1b33956804ecf7769e41197c3
This commit is contained in:
Florian Apolloner 2018-10-16 21:29:33 +02:00
parent 7265ac64ee
commit 065d6e8b3a
1 changed files with 1 additions and 3 deletions

View File

@ -144,9 +144,7 @@ REST_FRAMEWORK = {
'DEFAULT_PAGINATION_CLASS': 'rest_framework.pagination.LimitOffsetPagination',
'PAGE_SIZE': 1000,
'DEFAULT_FILTER_BACKENDS': (
'rest_framework.filters.OrderingFilter',
'rest_framework.filters.SearchFilter',
'django_filters.rest_framework.DjangoFilterBackend'
'django_filters.rest_framework.DjangoFilterBackend',
),
'DEFAULT_RENDERER_CLASSES': (
'rest_framework.renderers.JSONRenderer',