3 ms·
Isn't there a risk of SQL injection from user input?
by paulryanrogers 3y ago
Isn't there a risk of SQL injection from user input?
- surprisetalk 3y agopostgres.js sanitizes inputs, but also provides a backdoor, so sql`select ${"hello"}, ${sql`world`}` becomes select $1, world [1] https://github.com/porsager/postgres https://github.com/porsager/postgres