-
Type: Bug
-
Resolution: Done
-
Priority: Major - P3
-
None
-
Affects Version/s: 3.5.4
-
Component/s: Security
-
Labels:None
-
ALL
-
As per documentation at:
https://docs.mongodb.com/manual/core/server-side-javascript/#disable-server-side-execution-of-javascript
--noscripting option when passed to mongod, doesn't stop any '$where' executions.