fix(mongodb): Block arbitrary update operators in _patch data (CWE-943)#3665

daffl merged 2 commits intodovefeathersjs/feathers:dovefrom

fix/mongodb-operator-injectionfeathersjs/feathers:fix/mongodb-operator-injectionCopy head branch name to clipboard