hitchhikers-guide icon indicating copy to clipboard operation
hitchhikers-guide copied to clipboard

Published 20 hours ago • verified publisher icon dssg

Change the Python and SQL process to discourage SQL injection

Open jdcc opened this issue 2 years ago • 0 comments

The training in sources/curriculum/software/python_sql.md doesn't say anything about potential SQL injection issues, and is training folks to write potentially unsafe code. There should at least be a mention of SQL injection attacks, or the training should be rewritten to use bound parameters.

jdcc avatar Jun 14 '22 22:06 jdcc