-
Notifications
You must be signed in to change notification settings - Fork 40
Open
Labels
Description
If I create a query like:
await client.QueryMultiSeriesAsync ("_internal", "select field from measurement where something");
If "something" is generated from user input is there something in the library that can parameterize that input to guard against SQL injection attacks?
I would want something like:
query = "select field from measurement where {something}";
params = { "something", "value" };
await client.QueryMultiSeriesAsync ("_internal", query, params);
And QueryMultiSeriesAsync would automatically scrub/escape params to guard against SQL injection. Also see: InfluxDB Python Bind Parameters