-
Is the following code safe to use? Does sea-query escape identifiers carefully enough? let tainted_input: &str = todo!(); // user input, do not trust
let sql = Query::select()
.from(Alias::new(tainted_input))
.column(Asterisk)
.build(PostgresQueryBuilder); |
Beta Was this translation helpful? Give feedback.
Answered by
tyt2y3
Sep 13, 2023
Replies: 1 comment
-
Yes. It will always be quoted and escaped. |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
spoxii
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Yes. It will always be quoted and escaped.