A super-simple no-dependency defense against query selector injection attacks: http://blog.websecurify.com/2014/08/hacking-nodejs-and-mongodb.html - View it on GitHub