3 ms·
That's a whole bunch of words to say you just don't plain like relational databases. Using SQL injection as a case against them is also fairly silly; the error
by kungtotte 8y ago
That's a whole bunch of words to say you just don't plain like relational databases.
Using SQL injection as a case against them is also fairly silly; the error there is that you don't sanitise your input. It has nothing to do where the query goes, any type of data store is vulnerable in that scenario.
- vineetr 8y agoSQL injection falls into a general class of vulnerabilities where user input escapes the data plane and get injected into the control plane. I was looking for the article to provide insight on how a new database or query+execution language would avoid this entire class of vulnerabilities, because that is what I would expect as a solution. So yeah, picking on RDBMS for SQL injection is fairly silly, and worse, it betrays ignorance on the subject. To extend his argument, browsers are responsible for XSS.