Code

Let the query helper ensure that all string arguments are escaped.
authorSebastian Harl <sh@tokkee.org>
Sun, 23 Nov 2014 11:33:27 +0000 (12:33 +0100)
committerSebastian Harl <sh@tokkee.org>
Sun, 23 Nov 2014 11:33:27 +0000 (12:33 +0100)
commit950446bbdc13d62f1f8b674cdf1b852d8497635b
treea98a6eb0fd5d6d780ab0dd7fd1dabc39ca0543d6
parent79045a4df99f6ce7d7eb6f541a48644bf91d836f
Let the query helper ensure that all string arguments are escaped.

Introduce a new type, identifier, to be used for strings that shall never be
escaped, similar to how html/template treats the HTML, JS, etc. types. The
query helper now expects printf style format and value arguments.
server/query.go