Can javascript browser harm my server?

Question

I am encoding an application in which I want the user to recognize javascript this way:

• The user writes javascript code in the browser, as in the IDE.
• The user saves it and the code will be saved as a string in my No-SQL database (MongoDB / CouchDB).
• The user opens the application a few days later, and I pass this line to a web browser, where the code will be executed using eval ().

Only JSON data will be transmitted between the backend server and the web browser. The server will not do anything in the code line, it will save it directly to the database.

Can this code damage the server?

Answer 1

server-side, no. IE . ...

, ( ), IE SQL-.

• IE
• SQL Injection

, , :

ajax.post("page_save_js.ext", "code=flood");

, , , . StackOverflow , .

Answer 2

, .

. .

Answer 3

, , , , , SQL- js-.

, (SQL- / db) (js- )

Answer 4

javascript, - , . (, , SQL-.)

, ( ) javascript ajax , .

Answer 5

nosql "SQL-", QL-. , API ( SQL).

NOSQL- http://www.kalzumeus.com/2010/09/22/security-lessons-learned-from-the-diaspora-launch/ ( "NoSQL Doesnt Mean No SQL Injection" ).

: , , java script , , . CSRF . .