Potential fix for code scanning alert no. 1: Database query built from user-controlled sources

Nec0ti · github-advanced-security[bot] · web-flow · commit 1a26c8aa6a8d · 2025-03-05T18:12:53.000+03:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/routes/auth.js b/routes/auth.js
@@ -8,7 +8,7 @@ router.post('/register', async (req, res) => {
   try {
     const { username, password } = req.body;
 
-    const existingUser = await User.findOne({ username });
+    const existingUser = await User.findOne({ username: { $eq: username } });
     if (existingUser) {
       return res.status(400).json({ message: 'Username is in use' });
     }

Original file line number	Diff line number	Diff line change
`@@ -8,7 +8,7 @@ router.post('/register', async (req, res) => {`
`8`	`8`	`try {`
`9`	`9`	`const { username, password } = req.body;`
`10`	`10`
`11`		`- const existingUser = await User.findOne({ username });`
	`11`	`+ const existingUser = await User.findOne({ username: { $eq: username } });`
`12`	`12`	`if (existingUser) {`
`13`	`13`	`return res.status(400).json({ message: 'Username is in use' });`
`14`	`14`	`}`