Make custom query parameter literal vs string

If they get past Security Provider they can do whatever your API allows them to do.

If you don’t sanitize sql queries they can DROP a database.

1 Like