CODEWITHSUNDEEP
pymongosql-injectioncheckmarxsecure-coding
Kanna
Kanna

Reputation: 145

find elements values are flows through the code without properly sanitized or validated. This may enable an second order SQL injection attack

tags = mycoll.find({"category": "movie"}).distinct("tags")

I have used above code in django and feel it's there is no issue with But checkmarx throwing error

Help?

Upvotes: 1

Views: 305

Answers (0)

Related Questions