It passes the queries through clojure.java.jdbc, so provides the same level of protection as that, as far as I am aware.
Jony On Thursday, 24 July 2014 12:08:52 UTC+1, Paul Butcher wrote: > > I wasn’t aware of yesql - thanks for the pointer. > > My concern with “write your queries in pure SQL” is increased > vulnerability to SQL injection. From a quick glance at yesql, it seems > likely that it does provide protection against SQL injection, but there’s > nothing in the documentation (that I can find at first glance, at least) > that explicitly says so. > > Can anyone who understands it confirm or deny? > -- You received this message because you are subscribed to the Google Groups "Clojure" group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups "Clojure" group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.