我直接把前臺(tái)傳來的json數(shù)據(jù)（req.body）存入mongod數(shù)據(jù)庫里面了，沒有對(duì)數(shù)據(jù)進(jìn)行惱人的過濾，代碼是這樣寫的app.post('/post', urlencodedParser, function (req, res) {
db.myinsert(req.body, function (err,result) { if(err) { console.log('Error:'+ err); return; }
console.log(req.body)
})
console.log(req.body);
})請(qǐng)教，express框架對(duì)req.body進(jìn)行過濾了沒，這樣寫安全么
express框架會(huì)過濾數(shù)據(jù)庫注入或者xss攻擊么
aluckdog
2018-10-03 10:17:33
