logicalparadox / filtr Goto Github PK

Mongo filters perform array lookups. This should return a match:

let doc1 = {id:1, tags:['blue','green']}
let doc2 = {id:2, tags:['red']}
let docs = [doc1, doc2]
let query = {tags:'blue'}
let matches = filtr(query).test(docs)
assert.include(matches, doc1)
assert.notInclude(matches, doc2)

Hey dude,

Nice work on this. Not sure if you know, but I have a very similar project called Query Engine which seems to do the same stuff.

What are your thoughts, should we join forces?

Prototype pollution vulnerability in function setPathValue() in node_modules\filtr\lib\filtr.js in filtr0.3.0 via the variable tpm.
The function setPathValue() lead to Prototype pollution in line 299 and 314.the function input like filtr.setPathValue('proto.test',123,{}))