3 ms·
That is an issue, but essentially it boils down to the existing risk of unknowledgeable people not escaping untrusted inputs. The solution should be more educat
by falcor84 2y ago
That is an issue, but essentially it boils down to the existing risk of unknowledgeable people not escaping untrusted inputs. The solution should be more education and better tooling (linters, SAST), and t-strings are likely to help with both.
- masklinn 2y agot-strings allow building APIs which don't accept strings at all (or require some sort of opt-in), and will always error on such. That's the boon. Having to write cr.execute(t"...") even when there's nothing to format in is not a big imposition.