Commit Graph

5 Commits

Author SHA1 Message Date
matt dannenberg
cd81198d02 SERVER-5782 $literal operator to help prevent injection attacks 2013-08-09 17:48:46 -04:00
Matt Dannenberg
dd8121057d SERVER-6425 remove literal from aggro 2012-08-02 17:47:59 -04:00
Mathias Stearn
ec18db9868 Rewrite ExpressionObject
The main difference between this version and the old is that the following
three $pipelines will produce the same output (SERVER-6468):

{'a.b': 1} // classic inclusion
{a: {b: 1} // nested inclusion
{'a.b': '$a.b'} // dotted FieldPathExpression
{a: {b: '$a.b'} // nested FieldPathExpression

Additionally support for exclusion of fields other than _id has been
removed for 2.2 (SERVER-6361)

Other related bugs:
SERVER-6177 better error for {a:1, 'a.b':1}
SERVER-6181 support for computed _id
SERVER-6184 support {'a.b': 1, a:{c:1}} in either order

Remaining TODOs:
Re-enable the isSimple() method
See if this can be used more directly by $group to support nested fields (SERVER-6198)

Disabled test for SERVER-5369 because it depends on ability to exclude
arbitrary fields.
2012-07-20 17:54:22 -04:00
Matt Dannenberg
f5c6734a9c remove aggro utils.js from aggro tests 2012-07-06 13:45:08 -04:00
Matt Dannenberg
6edd4d75b3 SERVER-5782 add a $literal operator to aggregation
$literal returns a string rather than evaluating the string to prevent
injection attacks.

Signed-off-by: Siddharth Singh <singhsiddharth@gmail.com>
2012-06-15 14:17:11 -04:00