~/talk

Cypher Dynamism: A Step Towards Simpler and More Secure Queries

Talkat NODES 2024 · on Thursday, 2024-11-07· [security, databases]
links:none on file
slides:none on file

Neo4j adds dynamic labels and dynamic properties usable with set/remove via $() expressions that must evaluate to a non-null string or list (Neo4j 5.24 for nodes, relationships/types coming soon). Claims: this prevents Cypher injection for labels/types/properties and eliminates common APOC patterns like apoc.create.addLabels and apoc.do.* by letting pure Cypher build data. Demo specifics: LOAD CSV builds three nodes with five dynamic labels and ten properties; MATCH gains all/any predicates for label checks. Caveat: planner loses label statistics for pure-dynamic cases and may fall back to full scans.

AI-written summary · about

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.