In this case the sql function can not escape the id. If you were to use a tagged... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

basil-rash on Sept 19, 2018 | parent | context | favorite | on: Javascript: call functions without using parenthes...

In this case the sql function can not escape the id. If you were to use a tagged template, it could.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact