Jira issue originally created by user @doctrinebot:
This issue is created automatically through a Github pull request on behalf of dbehrman:
The current IN() expression is vulnerable to SQL injection and should be sanitized. It should be noted that the default is set to string because this works for all types including numeric values. However, this method can be slow for large lists. A recent test of 8,000 values too about .38 seconds. Numeric values only take about .015 seconds for the same data set.
Issue was closed with resolution "Won't Fix"
Comment created by @doctrinebot:
A related Github Pull-Request [GH-615] was assigned:
A related Github Pull-Request [GH-615] was closed: