{"action":"created","issue":{"url":"https://api.github.com/repos/sstur/nodeftpd/issues/62","labels_url":"https://api.github.com/repos/sstur/nodeftpd/issues/62/labels{/name}","comments_url":"https://api.github.com/repos/sstur/nodeftpd/issues/62/comments","events_url":"https://api.github.com/repos/sstur/nodeftpd/issues/62/events","html_url":"https://github.com/sstur/nodeftpd/issues/62","id":117937093,"number":62,"title":"Configurable list of allowed verbs","user":{"login":"pye2k","id":3414995,"avatar_url":"https://avatars.githubusercontent.com/u/3414995?v=3","gravatar_id":"","url":"https://api.github.com/users/pye2k","html_url":"https://github.com/pye2k","followers_url":"https://api.github.com/users/pye2k/followers","following_url":"https://api.github.com/users/pye2k/following{/other_user}","gists_url":"https://api.github.com/users/pye2k/gists{/gist_id}","starred_url":"https://api.github.com/users/pye2k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pye2k/subscriptions","organizations_url":"https://api.github.com/users/pye2k/orgs","repos_url":"https://api.github.com/users/pye2k/repos","events_url":"https://api.github.com/users/pye2k/events{/privacy}","received_events_url":"https://api.github.com/users/pye2k/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-11-20T00:03:40Z","updated_at":"2015-11-20T17:59:46Z","closed_at":null,"body":"I think of FTP generally as a legacy compatibility layer. Most of the time I find that the full array of verbs aren't necessary. Would it be useful to have the ability to turn off certain verbs altogether? E.g. block DELE or RMD (say, for an upload-only server that expects to be a data-sink)?"},"comment":{"url":"https://api.github.com/repos/sstur/nodeftpd/issues/comments/158475645","html_url":"https://github.com/sstur/nodeftpd/issues/62#issuecomment-158475645","issue_url":"https://api.github.com/repos/sstur/nodeftpd/issues/62","id":158475645,"user":{"login":"pye2k","id":3414995,"avatar_url":"https://avatars.githubusercontent.com/u/3414995?v=3","gravatar_id":"","url":"https://api.github.com/users/pye2k","html_url":"https://github.com/pye2k","followers_url":"https://api.github.com/users/pye2k/followers","following_url":"https://api.github.com/users/pye2k/following{/other_user}","gists_url":"https://api.github.com/users/pye2k/gists{/gist_id}","starred_url":"https://api.github.com/users/pye2k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pye2k/subscriptions","organizations_url":"https://api.github.com/users/pye2k/orgs","repos_url":"https://api.github.com/users/pye2k/repos","events_url":"https://api.github.com/users/pye2k/events{/privacy}","received_events_url":"https://api.github.com/users/pye2k/received_events","type":"User","site_admin":false},"created_at":"2015-11-20T17:59:46Z","updated_at":"2015-11-20T17:59:46Z","body":"I suppose a whitelist will also work, since the target of having a fixed set of commands will be suitable only for clients that connect and perform actions programmatically. In that case, the client should be operating within a known set of pre-defined commands anyway. Making the server match this list sounds sane. I will make a change and submit a pull request."}}