generated from HAlGhanim/Express-Template-FS
-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Labels
Description
You currently have an exposed endpoint returning all user info including hashed passwords which poses a security risk.
I know that this is a learning project, but I have to alert you that this kind of looseness with data exposure poses a risk to users and to you.
Always be alert and on guard when dealing with user data.
Use the select method to ignore the passwords. Use MongoDbCompass to inspect passwords are being saved and hashed properly.
Reactions are currently unavailable