You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If I create a query like:
await client.QueryMultiSeriesAsync ("_internal", "select field from measurement where something");
If "something" is generated from user input is there something in the library that can parameterize that input to guard against SQL injection attacks?
I would want something like:
query = "select field from measurement where {something}";
params = { "something", "value" };
await client.QueryMultiSeriesAsync ("_internal", query, params);
And QueryMultiSeriesAsync would automatically scrub/escape params to guard against SQL injection. Also see: InfluxDB Python Bind Parameters
The text was updated successfully, but these errors were encountered:
If I create a query like:
await client.QueryMultiSeriesAsync ("_internal", "select field from measurement where something");
If "something" is generated from user input is there something in the library that can parameterize that input to guard against SQL injection attacks?
I would want something like:
query = "select field from measurement where {something}";
params = { "something", "value" };
await client.QueryMultiSeriesAsync ("_internal", query, params);
And QueryMultiSeriesAsync would automatically scrub/escape params to guard against SQL injection. Also see: InfluxDB Python Bind Parameters
The text was updated successfully, but these errors were encountered: