4 ms·

Yes and your example is the hero case because it isn't just sugar. A t-string implementation for SQL will of course escape the values which is a common securit

• hombre_fatal 1y ago
  No, a t-string returns a Template which is basically { strings: str[], values: any[] }. So you would write db.execute(template) to turn template t"... where id = {id}" into a parameterized structure like ("... where id = ?", id).