Improvements and bug fixes #87
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| const stats = await rawStatistics | ||
| .find() | ||
| .project<Statistics>({ | ||
| adapters: { [name]: 1 }, |
Check failure
Code scanning / CodeQL
Remote property injection High
| .find() | ||
| .project<Statistics>({ | ||
| adapters: { [name]: 1 }, | ||
| versions: { [name]: 1 }, |
Check failure
Code scanning / CodeQL
Remote property injection High
| .find() | ||
| .project<Statistics>({ | ||
| adapters: { [name]: 1 }, | ||
| versions: { [name]: 1 }, |
Check failure
Code scanning / CodeQL
Remote property injection High
There was a problem hiding this comment.
Name is now checked against some regexes that ensure it can only be a valid adapter name. These names can't be used for prototype pollution or similar attacks.
| .project<Statistics>({ | ||
| adapters: { [name]: 1 }, | ||
| versions: { [name]: 1 }, | ||
| date: 1, |
Check failure
Code scanning / CodeQL
Remote property injection High
There was a problem hiding this comment.
Name is now checked against some regexes that ensure it can only be a valid adapter name. These names can't be used for prototype pollution or similar attacks.
…rough a stack trace Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Closes #60