Positional and named parameters for batch Rest API

[mcaramma]

I think it would be very useful to have positional and named parameters available in batch script REST API.

Something like:

{ "transaction" : true,
  "operations" : [
    {
      "type" : "script",
      "language" : "sql",
      "script" : [ "LET account = CREATE VERTEX Account SET name = ?",
                   "LET city = SELECT FROM City WHERE name = ?",
                   "CREATE EDGE Lives FROM $account TO $city RETRY 100" ],
      "parameters": ["Luke", "London"]
    }
  ]
}

and

{ "transaction" : true,
  "operations" : [
    {
      "type" : "script",
      "language" : "sql",
      "script" : [ "LET account = CREATE VERTEX Account SET name = :account",
                   "LET city = SELECT FROM City WHERE name = :city",
                   "CREATE EDGE Lives FROM $account TO $city RETRY 100" ],
      "parameters": {
         "account": "Luke",
         "city": "London"
      }
    }
  ]
}

[lvca]

+1

[lpil]

This would be super useful. Is the only way to do this currently to use string interpolation on the client side? I'm concerned about SQL injection attacks.