3 ms·
The proper solution to SQL injection is parameterized queries, not input sanitization, to my knowledge.
by jdlshore 5y ago
The proper solution to SQL injection is parameterized queries, not input sanitization, to my knowledge.
- deleted 5y ago[deleted]
- drunkpotato 5y agoThe irony here is that if you use the log4j equivalent of parameterized queries, parameterized logging strings, you're still vulnerable to this CVE, even if you did everything right.