NoSQL Operator Injection: When a Scalar Field Becomes a Filter
When a parser turns a scalar field into an object, keys such as $ne, $gt and $regex can become MongoDB query logic. Learn both request shapes, a safe proof, and strict schema defenses.
Security field notes
Understand the bug. See the exploit. Ship the fix.
Practical guides to real-world web vulnerabilities, written by the team building the scanner that finds them.