Skip to content
This repository has been archived by the owner on Dec 19, 2023. It is now read-only.

Fixed issue #30 #1

Closed
wants to merge 1 commit into from
Closed

Fixed issue #30 #1

wants to merge 1 commit into from

Conversation

benkyd
Copy link

@benkyd benkyd commented Jun 19, 2020

Fixed according to Issue #30, I also renamed arg to id, to make it more similar to the one used in mongo-db, a slight performance impact might be noted as the ID doesnt return in certain cases.

Bounty URL: https://www.huntr.dev/app/bounties/open/1-npm-bson-objectid

Implemented the fix described in Issue cabinjs#30

PoF

All tests pass

Copy link

@toufik-airane toufik-airane left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dear @plane000,

Can you explain how you managed to fix the security vulnerability?
Reading the code changes, I'm not sure about the efficiency of the fix.
It seems that you just rename the arg to id.

Thank you.

Copy link

@mufeedvh mufeedvh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hello @plane000,

Can you please leave a comment on how this patch can fix the vulnerability?

From reading the code changes, this doesn't seem to be a valid fix for the issue.

huntr sheriff

@huntr-helper
Copy link
Member

Sorry @benkyd, we enjoyed reviewing your fix but it has not been selected this time. If this bounty has not been closed, please feel free to try again with a new pull request!

We appreciate your effort and look forward to reviewing more of your fixes in the future! 🔨😎

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants