hintwatermelon / Vulnerable-Code-Snippets

A small collection of vulnerable code snippets
0 stars 0 forks source link

✨ (CodeQL) Fixed finding: "Code Injection" #4

Open pixeebot-helm-test[bot] opened 4 days ago

pixeebot-helm-test[bot] commented 4 days ago

✨✨✨

Remediation

This change fixes "Code Injection" (id = js/code-injection) identified by CodeQL.

Details

Replace raw string based NoSQL $where and $find queries with safe alternatives.

🧚🤖 Powered by Pixeebot Enhanced with AI Learn more

Feedback | Community | Docs | Codemod ID: codeql:javascript/nosql-code-injection