Web Security · Middle · Question 64 of 75
What is NoSQL injection, for example in MongoDB?
- ✓Correct answer: Passing an object like
{ "$ne": null }where a string is expected, so the query matches every user - 2Storing too many documents in one collection
- 3Injecting SQL into a NoSQL database
Explanation
If password from JSON is used directly in find({ password }), an operator object bypasses the check. Validate types with a schema.