It passes the queries through clojure.java.jdbc, so provides the same level 
of protection as that, as far as I am aware.


Jony


On Thursday, 24 July 2014 12:08:52 UTC+1, Paul Butcher wrote:
>
> I wasn’t aware of yesql - thanks for the pointer.
>
> My concern with “write your queries in pure SQL” is increased 
> vulnerability to SQL injection. From a quick glance at yesql, it seems 
> likely that it does provide protection against SQL injection, but there’s 
> nothing in the documentation (that I can find at first glance, at least) 
> that explicitly says so.
>
> Can anyone who understands it confirm or deny?
>

-- 
You received this message because you are subscribed to the Google
Groups "Clojure" group.
To post to this group, send email to clojure@googlegroups.com
Note that posts from new members are moderated - please be patient with your 
first post.
To unsubscribe from this group, send email to
clojure+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/clojure?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Clojure" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to clojure+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to