From 24caedcf95ed54dc6e2617029c396eb9c3381478 Mon Sep 17 00:00:00 2001 From: ymekuria Date: Thu, 27 Jun 2024 02:06:10 -0600 Subject: [PATCH 1/4] feat(actions-and-reducers.mdx): add warning against production use --- .../writing-a-zkapp/feature-overview/actions-and-reducer.mdx | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx b/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx index 91390c34b..b265d7c76 100644 --- a/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx +++ b/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx @@ -15,6 +15,7 @@ keywords: --- :::caution Warning +Actions and Reducers are still in development and currently are not safe to use in production applications. When creating updates to unknown accounts in a reducer function, care should be taken to avoid introducing security vulnerabilities. From b4873e59ce4a0e5bdb0adf5ef49a98da5756a87c Mon Sep 17 00:00:00 2001 From: ymekuria Date: Mon, 1 Jul 2024 16:10:58 -0600 Subject: [PATCH 2/4] feat(actions-and-reducer.mdx): specify o1js reducer api in production warning --- .../writing-a-zkapp/feature-overview/actions-and-reducer.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx b/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx index b265d7c76..05fcdbabd 100644 --- a/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx +++ b/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx @@ -15,7 +15,7 @@ keywords: --- :::caution Warning -Actions and Reducers are still in development and currently are not safe to use in production applications. +The Reducer API in o1js is still in development and currently is not safe to use in production applications. When creating updates to unknown accounts in a reducer function, care should be taken to avoid introducing security vulnerabilities. From 1b18d417d1936619bcf73a4b9b70e10459f19a48 Mon Sep 17 00:00:00 2001 From: ymekuria Date: Mon, 1 Jul 2024 18:31:55 -0600 Subject: [PATCH 3/4] feat(actions-and-reducer.mdx): add reducer caveat description to warning --- .../writing-a-zkapp/feature-overview/actions-and-reducer.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx b/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx index 05fcdbabd..7c5fd95b6 100644 --- a/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx +++ b/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx @@ -15,7 +15,7 @@ keywords: --- :::caution Warning -The Reducer API in o1js is still in development and currently is not safe to use in production applications. +The reducer API in o1js is currently not safe to use in production applications. The `reduce()` method breaks if more than the hard-coded number(default: 32) of actions are pending. Work is actively in progress to mitigate this limitation. When creating updates to unknown accounts in a reducer function, care should be taken to avoid introducing security vulnerabilities. From c7ec9433e8e37608b934c97815f0c36ada90a0ed Mon Sep 17 00:00:00 2001 From: Gregor Mitscha-Baude Date: Tue, 2 Jul 2024 20:28:33 +0200 Subject: [PATCH 4/4] adding a space --- .../writing-a-zkapp/feature-overview/actions-and-reducer.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx b/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx index 7c5fd95b6..1612b16b8 100644 --- a/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx +++ b/docs/zkapps/writing-a-zkapp/feature-overview/actions-and-reducer.mdx @@ -15,7 +15,7 @@ keywords: --- :::caution Warning -The reducer API in o1js is currently not safe to use in production applications. The `reduce()` method breaks if more than the hard-coded number(default: 32) of actions are pending. Work is actively in progress to mitigate this limitation. +The reducer API in o1js is currently not safe to use in production applications. The `reduce()` method breaks if more than the hard-coded number (default: 32) of actions are pending. Work is actively in progress to mitigate this limitation. When creating updates to unknown accounts in a reducer function, care should be taken to avoid introducing security vulnerabilities.