How dangerous is a mongo query which is fed directly from a URL query string? How dangerous is a mongo query which is fed directly from a URL query string? mongoose mongoose