Protecting against SQL Injection Attacks

[dbarentine]

If I create a query like: await client.QueryMultiSeriesAsync ("_internal", "select field from measurement where something");

If "something" is generated from user input is there something in the library that can parameterize that input to guard against SQL injection attacks?

I would want something like: query = "select field from measurement where {something}"; params = { "something", "value" }; await client.QueryMultiSeriesAsync ("_internal", query, params);

And QueryMultiSeriesAsync would automatically scrub/escape params to guard against SQL injection. Also see: InfluxDB Python Bind Parameters

[mvadu]

TODO: 2.0