Function containsDangerousOperator

apps/sim/app/api/tools/mongodb/utils.ts:49–62

* Recursively checks an object for dangerous MongoDB operators * @param obj - The object to check * @param dangerousOperators - Array of operator names to block * @returns true if a dangerous operator is found

(obj: unknown, dangerousOperators: string[])

 * @returns true if a dangerous operator is found
 */
function containsDangerousOperator(obj: unknown, dangerousOperators: string[]): boolean {
  if (typeof obj !== 'object' || obj === null) return false

  for (const key of Object.keys(obj as Record<string, unknown>)) {
    if (dangerousOperators.includes(key)) return true
    if (
      typeof (obj as Record<string, unknown>)[key] === 'object' &&
      containsDangerousOperator((obj as Record<string, unknown>)[key], dangerousOperators)
    ) {
      return true
    }
  }
  return false
}

export function validateFilter(filter: string): { isValid: boolean; error?: string } {
  try {