mirror of
https://github.com/github/codeql.git
synced 2026-03-20 22:46:47 +01:00
ObjectId is a sanitizer used to sanitize strings into valid MongoDB ids. During research we've found that this method is used. ObjectId returns a string representing an id. If at any time ObjectId can't parse it's input (like when a tainted dict in passed in), then ObjectId will throw an error preventing the query from running.