Uploaded image for project: 'Compass '
  1. Compass
  2. COMPASS-4420

Special Character in Database Name Doesn't Work as Expected in mongosh

XMLWordPrintableJSON

    • Type: Icon: Bug Bug
    • Resolution: Won't Do
    • Priority: Icon: Minor - P4 Minor - P4
    • No version
    • Affects Version/s: 1.23.0
    • Component/s: Compass
    • Labels:
      None
    • Not Needed

      This is for Compass 1.23.0-beta.2 but doesn't exist in the Jira field tag.

      In mongosh

      > use %3Cscript%3Ealert(1)%3C%2Fscript%3E
      > db.asdf.insertOne("hello":"test")

      generates an error, but the "%" character is allowed.

      https://docs.mongodb.com/manual/reference/limits/#restrictions-on-db-names

      In Compass UI, creating the database and adding a document is successful. The behavior is inconsistent.

      Related to https://jira.mongodb.org/browse/CLOUDP-70233

        1. image-2020-09-18-09-48-21-549.png
          image-2020-09-18-09-48-21-549.png
          33 kB
        2. Screen Shot 2020-09-17 at 7.59.07 PM.png
          Screen Shot 2020-09-17 at 7.59.07 PM.png
          69 kB
        3. Screen Shot 2020-09-17 at 8.14.48 PM.png
          Screen Shot 2020-09-17 at 8.14.48 PM.png
          250 kB

            Assignee:
            Unassigned Unassigned
            Reporter:
            felicia.hsieh@mongodb.com Felicia Hsieh
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: