title: JavaScript NoSQL Injection prevention in MongoDB
body: <p>How can I prevent JavaScript NoSQL injections into MongoDB?</p>
  
  <p>I am working on a Node.js application and I am passing <code>req.body</code>, which is a json object, into the mongoose model's save function. I thought there were safeguards behind the scenes, but this doesn't appear to be the case.</p>