Re: Is passing a list as a bound variable safe from SQL injection?

From: Daniele Varrazzo <daniele(dot)varrazzo(at)gmail(dot)com>
To: Federico Di Gregorio <fog(at)dndg(dot)it>
Cc: "W(dot) Matthew Wilson" <matt(at)tplus1(dot)com>, "psycopg(at)postgresql(dot)org" <psycopg(at)postgresql(dot)org>
Subject: Re: Is passing a list as a bound variable safe from SQL injection?
Date: 2013-10-03 13:21:02
Message-ID: CA+mi_8a06rA6pVSUigdNWPFOBz3JfTou7xwGGOJVPsZMYTOb+w@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: psycopg

On Thu, Oct 3, 2013 at 2:07 PM, Daniele Varrazzo
<daniele(dot)varrazzo(at)gmail(dot)com> wrote:
> Interesting indeed. Too bad in the article there is no reference to
> the discussion in -performance about the issue (or is there and I
> haven't seen it?).

Found it: there is a single answer:
http://www.postgresql.org/message-id/6581.1375891657@sss.pgh.pa.us

-- Daniele

In response to

Browse psycopg by date

  From Date Subject
Next Message Stuart Bishop 2013-10-08 16:19:46 Re: Is passing a list as a bound variable safe from SQL injection?
Previous Message Daniele Varrazzo 2013-10-03 13:07:25 Re: Is passing a list as a bound variable safe from SQL injection?