The JSON SQL Injection Vulnerabilitytl;dr Many SQL query builders written in Perl do not provide mitigation against JSON SQL injection vulnerability. Developers should not forget to either type-check the input values taken from JSON (or any other hierarchical data structure) before passing them to the query builders, or should better consider migrating to query builders that provide API immune to such vulnerability. Note: 問題の発見者による日
GitHub - basecamp/marginalia: Attach comments to ActiveRecord's SQL queries
kiwanami/emacs-edbi: Database Interface for Emacs Lisp
Amazon.co.jp: アート・オブ・SQL ―パフォーマンスを引き出すSQLプログラミング手法 (Theory in practice): Stephane Faroult (著), Peter Robson (著), 木下哲也 (翻訳), 有限会社福龍興業 (翻訳): 本
