I was inquiring more about the backend js use in node and mongo. You might, for instance, find that simply sanitizing user input isn't enough when you're using

I was inquiring more about the backend js use in node and mongo. You might, for instance, find that simply sanitizing user input isn't enough when you're using the same interpreted language at multiple stages. If an attacker could cause the right front end code to be executed on the app server, or backend code to be executed in the database you could potentially compromise a lot.