Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Result include text field, but should not #413

Open
MaxmaxmaximusGitHub opened this issue Feb 29, 2020 · 0 comments
Open

Result include text field, but should not #413

MaxmaxmaximusGitHub opened this issue Feb 29, 2020 · 0 comments

Comments

@MaxmaxmaximusGitHub
Copy link

MaxmaxmaximusGitHub commented Feb 29, 2020

This query fetch non include text field:

Messages.createQuery('messages', {
  text: 0
})

But this query fetch include text field:

Messages.createQuery('messages', {

  text: 0

  $filters: {
    text: {$ne: 'lol'}
  }

})

Result include text field, but should not. I just use filter, i not want send text field to users.

Example:

Users.createQuery('messages', {

  $filters: {
    pass: {$exists: true}
  }

})

This query not sould incluse pass field, i just FILTER by pass field. This is a very dangerous bug, and extremely unreasonable behavior. Your documentation DIRECTLY SAY: we are obliged to list all fields explicitly. Here I did not list the pass field, but it will get to the user in the browser. moreover, even if I specify pass: 0, the password will still go to the user browser.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant