Middleware expres disable query param

server.js

/**
 * Created by syzer on 8/20/2014.
 */
var port = 1337;
var express = require('express');
var app = express();

function disablePopulate(req, res, next) {
    var ip = req.headers['x-forwarded-for'] || req.connection.remoteAddress;
    console.log('disabling malicious populate on request from ip', ip);
    if (req.query && req.query.populate) {
        delete req.query.populate;
    }
    next();
}

app.get('/', disablePopulate, function (req, res) {
    res.send('page render finished without populate'); // + req.query
});

app.listen(port);
console.log('started server @1337');

// use nodemon server.js
// test with 
// curl -X GET -s http://localhost:1337?populate=5 -w "\n"
// `page render finished without populate`