Merge pull request #10 from Nec0ti/dev

Nec0ti · web-flow · commit 54205c9803ff · 2025-03-05T18:13:03.000+03:00
Potential fix for code scanning alert no. 1: Database query built from user-controlled sources
diff --git a/routes/auth.js b/routes/auth.js
@@ -8,7 +8,7 @@ router.post('/register', async (req, res) => {
   try {
     const { username, password } = req.body;
 
-    const existingUser = await User.findOne({ username });
+    const existingUser = await User.findOne({ username: { $eq: username } });
     if (existingUser) {
       return res.status(400).json({ message: 'Username is in use' });
     }

Original file line number	Diff line number	Diff line change
`@@ -8,7 +8,7 @@ router.post('/register', async (req, res) => {`
`8`	`8`	`try {`
`9`	`9`	`const { username, password } = req.body;`
`10`	`10`
`11`		`- const existingUser = await User.findOne({ username });`
	`11`	`+ const existingUser = await User.findOne({ username: { $eq: username } });`
`12`	`12`	`if (existingUser) {`
`13`	`13`	`return res.status(400).json({ message: 'Username is in use' });`
`14`	`14`	`}`