Kysely•2y ago

Is kysely sanitizing sql injection when using raw sql ?

Suppose I have a piece of code that does
sql

${myString}

${myString}

${myString}

${myString}
where myString contains sql injection, will kysely sanitize it or is it something that I need to take care of ?

Solution

Of course it is.