search

lpil / sqlight

💡 Use SQLite from Gleam!
https://hexdocs.pm/sqlight
79 stars 11 forks source link

SQL Injection #9

Closed renatillas closed 3 months ago

renatillas commented 3 months ago

Hi, is there any plan to add a exec with args function? The package seems risky in a prod envionment without any escaping function. If that's not the case, which alternatives do we have in the gleam packages to escape input?

lpil commented 3 months ago

You can do this today! The function you want is query.

renatillas commented 3 months ago

Thanks! I missed it completely!