Details
-
Bug
-
Resolution: Won't Do
-
Minor - P4
-
1.23.0
-
None
-
Not Needed
Description
This is for Compass 1.23.0-beta.2 but doesn't exist in the Jira field tag.
In mongosh
> use %3Cscript%3Ealert(1)%3C%2Fscript%3E
> db.asdf.insertOne("hello":"test")
generates an error, but the "%" character is allowed.
https://docs.mongodb.com/manual/reference/limits/#restrictions-on-db-names
In Compass UI, creating the database and adding a document is successful. The behavior is inconsistent.
Related to https://jira.mongodb.org/browse/CLOUDP-70233