Uploaded image for project: 'Node.js Driver'
  1. Node.js Driver
  2. NODE-2514

BSON serialization ignores unknown _bsontype

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • bson-1.1.1
    • bson-1.1.4
    • None
    • None
    • Hide

      1. What would you like to communicate to the user about this feature?
      2. Would you like the user to see examples of the syntax and/or executable code and its output?
      3. Which versions of the driver/connector does this apply to?

      Show
      1. What would you like to communicate to the user about this feature? 2. Would you like the user to see examples of the syntax and/or executable code and its output? 3. Which versions of the driver/connector does this apply to?

    Description

      1.x versions of js-bson will silently ignore an unknown value for an object's _bsontype, leading to cases where an object is serialized as a document rather than the intended BSON type.

      For example:

      const bson = require('bson');
      		 
      const BSON = new bson();
      		 
       
      		 
      const oid = new bson.ObjectId();
      		 
      oid._bsontype = "invalid";
      		 
      console.dir(BSON.deserialize(BSON.serialize({ a: oid }));
      		 
      // results in: {}

      Attachments

        Activity

          People

            matt.broadstone@mongodb.com Matt Broadstone
            matt.broadstone@mongodb.com Matt Broadstone
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: