Hacking the system

[theodorDiaconu]

Try to hack the system:

• Create a Test that tries to hack the database, in exposing information you do not have access to
• Create a suite of "hack attempts" that try to break the system
• Write code until they get fixed.

Test exposure more, at deeper levels, try to hack it.

Try to hack the aggregate pipeline. Analize the code first.

Hacking ideas:

users: {
     $filters: { $or: { '_id': {$exists: true} } } // see if it bypasses our filters
     comments: {
           $filters: { $or: {'_id': {$exists: true} }; // check if sublinks of any kind can be filter bypassed
           // this means one,many,one-meta,many-meta,resolver.
     }
}

users: {
   $limit: -1 // see what that does
   comments: {
        $options: {sort: [some-hack-to-the-pipeline], limit: [same]},
        $filters: { $not: { userId: null } }
        // try also to by pass via other logical operators $or $nor $not $and
   }
}