https://ircashem.github.io/posts/Nosql-injection-in-mongodb/