[Question] prevent injection

[mrmoein]

i want prevent injection when read and wirte data

my read query is like this:

var query = $"from(bucket:\"{_bucketName}\") " +
            $"|> {range[0]} " +
            $"|> filter(fn: (r) => r[\"device_id\"] == \"{deviceId}\") " +
            $"|> aggregateWindow(every: {range[1]}, fn: mean, createEmpty: false)" +
            "|> pivot(rowKey:[\"_time\"], columnKey: [\"_field\"], valueColumn: \"_value\")";

user send deviceId to my API

also i use POCO for writing data, should i sanitize my data?