You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
I'm trying to use mingo to allow querying a just subset of data via an API, but i'd like to not allow $where or any eval clauses.
Describe the solution you'd like
As a user of mingo, for security purposes, I'd like to not allow any evals in queries such as $where: "this.foo && this.bar", is theres a way to disable it?
Additional context
Heres the reference on how to disable this in the mongodb documentation:
Is your feature request related to a problem? Please describe.
I'm trying to use mingo to allow querying a just subset of data via an API, but i'd like to not allow
$where
or any eval clauses.Describe the solution you'd like
As a user of
mingo
, for security purposes, I'd like to not allow any evals in queries such as$where: "this.foo && this.bar"
, is theres a way to disable it?Additional context
Heres the reference on how to disable this in the mongodb documentation:
The text was updated successfully, but these errors were encountered: