mongoose injection

AikidoSec · Mar 6, 2024 · db61c46 · db61c46
1 parent 510f94c
commit db61c46
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 5 deletions.
diff --git a/sample-apps/next-sample-app/app/mongoose/Form.tsx b/sample-apps/next-sample-app/app/mongoose/Form.tsx
@@ -11,7 +11,7 @@ export const Form = () => {
             headers: {
                 "Content-Type": "application/json",
             },
-            body: JSON.stringify({ message }),
+            body: JSON.stringify({ message: { $gt: "" } }),
         });
         await res.json();
         window.location.reload();

diff --git a/sample-apps/next-sample-app/app/mongoose/write/route.ts b/sample-apps/next-sample-app/app/mongoose/write/route.ts
@@ -5,10 +5,10 @@ import { runWithContext } from '@aikidosec/guard'
 
 export async function POST(req: NextRequest) {
     await connectMongo();
-    const { message } = await req.json();
+    const body = await req.json();
     await runWithContext(
         {
-            body: { message },
+            body,
             url: req.url,
             method: req.method,
             query: undefined,
@@ -23,6 +23,8 @@ export async function POST(req: NextRequest) {
             }, {}),
         },
         async () => {
+            const { message } = body
+            const msg = await Guestbook.find({ message }, {}, { sort: { _id: -1 } });
             await Guestbook.create({ message });
         }
     );

diff --git a/sample-apps/next-sample-app/app/page.tsx b/sample-apps/next-sample-app/app/page.tsx
@@ -3,8 +3,8 @@ import Link from "next/link";
 export default function Home() {
   return (
     <main className="grid grid-cols-4 p-16 items-center justify-center">
-      <Link href="/mongodb" className="p-4 rounded-md bg-gray-900 hover:bg-gray-800">
-        MongoDB
+      <Link href="/mongoose" className="p-4 rounded-md bg-gray-900 hover:bg-gray-800">
+        mongoose
       </Link>
     </main>
   );