Fix mongodb sinks to work with a real db backend

Author: tough-griff

lib/sinks/nosqlInjection/mongodb.js

@@ -1,41 +1,7 @@
 'use strict';
 
-const { EventEmitter } = require('events');
-const { Db, Collection } = require('mongodb');
-
-const origEval = Db.prototype.eval;
-Db.prototype.eval = async function overloadedEval(code, params, opts) {
-  // run the original eval asynchronously, ignoring any errors it will throw since we aren't connected.
-  try {
-    origEval.call(this, code, params, opts);
-  } catch (err) {
-    // throw it away
-    console.log(err);
-  }
-  return { code };
-};
-
-const origRename = Collection.prototype.rename;
-Collection.prototype.rename = async function overloadedRename(name, options, callback) {
-  try {
-    origCreateCollection.call(this, name, options, callback);
-  } catch (err) {
-    console.log(err);
-  }
-  return { name }
-};
-
-const topology = new EventEmitter();
-debugger;
-const db = new Db('testbench', topology, {});
-// Call Collection constructor
-const collection = new Collection(db, topology, 'testbench', 'collection', null, {});
-console.log(collection);
-// const collection = db.createCollection('testCollection', { capped: true}, (result) => {
-  // console.log(result);
-// });
-
-
+const { MongoClient } = require('mongodb');
+const url = process.env.MONGODB_URI || 'mongodb://localhost:27017/';
 
 /**
  * @param {string} input user input string
@@ -49,8 +15,13 @@ module.exports['mongodb.Db.prototype.eval'] = async function _eval(
 ) {
   if (noop) return 'NOOP';
 
+  const client = await MongoClient.connect(url);
+
   const fn = safe ? 'function() {}' : input;
-  const result = await db.eval(fn);
+  const result = await client
+    .db('testbench')
+    .eval(fn)
+    .catch(() => ({ code: fn }));
   return `<pre>${JSON.stringify(result, null, 2)}</pre>`;
 };
 
@@ -64,15 +35,14 @@ module.exports['mongodb.Collection.prototype.rename'] = async function rename(
   input,
   { safe = false, noop = false } = {}
 ) {
-  const newname = safe ? 'newName' : input
-  const result = await collection.rename(newName);
   if (noop) return 'NOOP';
 
-  if (safe) {
-    return Collection.rename('newName', options, () => {});
-  } else {
-    // Pass in input somewhere
-    return Collection.rename(input, options, callback);
-    // return Collection.rename(input, options, callback);
-  }
+  const client = await MongoClient.connect(url);
+  const collection = await client.db('testbench').createCollection('new');
+
+  const newName = safe ? 'newName' : input;
+  const result = await collection
+    .rename(newName)
+    .catch(() => ({ name: newName }));
+  return `<pre>${JSON.stringify(result, null, 2)}</pre>`;
 };

package-lock.json

@@ -28,7 +28,7 @@
     "libxmljs": "^0.19.7",
     "libxmljs2": "^0.22.0",
     "lodash": "^4.17.15",
-    "mongodb": "^3.3.0",
+    "mongodb": "^3.5.2",
     "mysql": "^2.17.1",
     "node-fetch": "^2.6.0",
     "node-serialize": "0.0.4",