3 ms·
Is there a wiki for security? It sounds its performance is good to not have a middle layer between interface and database, but then I have no idea how do you ap
by Existenceblinks 9y ago
Is there a wiki for security? It sounds its performance is good to not have a middle layer between interface and database, but then I have no idea how do you apply SQL-injection prevention, rate limit and other QoS.
- deleted 9y ago[deleted]
- floatboth 9y agoidk about this thingy but the original PostgREST is not vulnerable to SQL injection. You're not writing SQL, you're writing URL query strings, and PostgREST processes them correctly (I think it uses prepared statements for most things, and careful filtration for table names and such).
- avelino 9y agopREST is not vulnerable to SQL injection, recommend you run tests