3 ms·
SQL is text-based, and therefore injections are far easier. NoSQL (specifically Mongo) does not generally just plug user-provided info into a string, and is th
by PLejeck 15y ago
SQL is text-based, and therefore injections are far easier. NoSQL (specifically Mongo) does not generally just plug user-provided info into a string, and is therefore secure against injections.
Age does not matter. In many cases, youth can even be beneficial, since it can include more modern techniques.
- patio11 15y agoYou're being overly restrictive in thinking of the attack space. For example, do you think keys in your NoSQL engine of choice necessarily always work out well if they include malformed Unicode characters? Do you think all buffers are safe? etc, etc Talk to tptacek about this if you think NoSQL means No SQL Injections So I'm OK.