search

saeedNW / project_manager

A simple project and team management back-end application with node.js and express
0 stars 0 forks source link

No-SQL injection #4

Open saeedNW opened 1 year ago

saeedNW commented 1 year ago

There isn't any method or function to escape user inputs. So users can send and save any scripts into database

saeedNW commented 1 year ago

#03 - user inputs are not escaped and trim