3 ms·

It would be nice to know whether parts of node.js itself are vulnerable to those attacks or just badly written user code

• xtian 15y ago
  The paper is just describing common sense stuff: using eval() on user input and passing user input directly to a database.
  • pothibo 15y ago
    With everything node.js provides, I can't understand why someone would use eval()... Specially with user input.
    • jrockway 15y ago
      Of course they wouldn't. "Node.js" and "NoSQL" appear in the title of this article merely to get people to click the link.