DEV Community

Discussion on: Running the stored procedure from NestJs

Collapse
 
notaduck profile image
notaduck

BhargavMantha I am almos sure that this.userRepository.query(call dev_db.listUsers(${the_input_paramenters_required}); is prone to sql injection, you should use a param list instead.

Collapse
 
bhargavmantha profile image
BhargavMantha

Thank you so much for pointing that out notaduck. My apologies for missing your comment. :)