title: Mongoose and Query Injection when using Javascript?
body: <p><a href="http://docs.mongodb.org/manual/faq/developers/#how-does-mongodb-address-sql-or-query-injection" rel="noreferrer">How does MongoDB address SQL or Query injection?</a> explains how to handle query injection with BSON when using javascript on the server. I haven't been able to track down how/whether <a href="http://mongoosejs.com/" rel="noreferrer">Mongoose</a> handles query injection though.</p>
  
  <p>At this point I have two questions:</p>
  
  <ol>
  <li>Does Mongoose protect against query injection (using BSON or some other method)</li>
  <li>If it does,  are there any quirks with it's implementation that a developer need to be aware of?</li>
  </ol>