2 ms·
> On security: the data is read-only, using SQLite’s immutable mode. You can’t damage it with a query—INSERT and UPDATEs will simply throw harmless errors. In
by lukaseder 8y ago
> On security: the data is read-only, using SQLite’s immutable mode. You can’t damage it with a query—INSERT and UPDATEs will simply throw harmless errors.
In times of data breaches, the naivety of this statement is alarming. It is not too difficult to extract (all) data from an API that allows for passing arbitrary SQL statements.
Be careful here!
- lukaseder 8y agoI mean this: https://fivethirtyeight.datasettes.com/fivethirtyeight-c9e67c4?sql=select+*+from+sqlite_master https://fivethirtyeight.datasettes.com/fivethirtyeight-c9e67...