4 ms·You're right. That's why I said upfront - whitelist values in the userquery object.by ksri 9y agoYou're right. That's why I said upfront - whitelist values in the userquery object.