top | item 43749416

(no title)

m2f2 | 10 months ago

If this is just for sql queries ... it'd be overkill especially where you need to compare the usual PREPARE statements with the hassle of keeping everyone on 3.14 and above.

discuss

order

orthoxerox|10 months ago

It's also for logging:

    log.debug(f"The value of counter was {counter}, the nonce was {nonce}")
builds a new string every time the interpreter hits this line. Whereas

    log.debug(t"The value of counter was {counter}, the nonce was {nonce}")
passes a Template to the debug() function that bails out if debug mode is not on and doesn't build a string.

bazoom42|10 months ago

Could also be used to prevent html injection.

nhumrich|10 months ago

It's for SQL, HTML, and shell. But idk how solving injection, a top on the OWASP list forever is considered "overkill".