Mongodb and security, how is it implemented?

Question

MongoDB

Greetings to the knowing luminaries.
Please enlighten me or point me in the right direction.
How is security implemented in Mongodb?
When working, it screens the data itself and displays them no longer screened or translated into html entities, while pieces of Java script code are not executed.
Tried to slip in insert xss scripts from an Internet, they did not work out at an output.
Are there other options?
Thankful.

Answer 1

What you put in the base is what you take.
Render should be responsible for xss.

Answer 2

Tried to slip in insert xss scripts from an Internet, they did not work out at an output.

They did not work, not because your Mongodb is very secure, but because most likely CSP is enabled in the browser (and it may not be enabled for everyone). And yes, the speaker above is completely right, you need to escape and clear the lines at the stage of output / rendering of the template