Protected against mass assignment?

Does Meteor protected against mass assignment which it was a headline in Github and prompted many frameworks to implement whitelist on accepting incoming data to MongoDB and other databases thru 3d parties package?

1 Like


Links please?

  • Headline at GitHub?
  • What frameworks have implemented whitelists? With what PRs or commits?
  • What 3rd parties package?


Or is this about some old issue, where MongoDB was accessible from Internet? MongoDB 6, that current Meteor uses, is usually accessible only at localhost. Not from Internet.

Or is this some other issue?