Drop Table Bookmark

i'm not sure man function Bookmark({ slug }) { return ( <button formAction={async () => { "use server"; await sql`INSERT INTO Bookmarks (slug) VALUES (${slug});`; }} > <BookmarkIcon /> </button> ); } <Bookmark slug="drop table bookmarks; --" />

A programming post shows a bookmark component that saves a slug directly into a SQL query, apparently leaving it vulnerable to SQL injection. The reply humorously supplies a malicious slug that would drop the bookmarks table, turning the original speaker’s uncertainty into a destructive joke. EN: A programming post shows a bookmark component that saves a slug directly into a SQL query, apparently leaving it vulnerable to SQL injection. The reply humorously supplies a malicious slug that would drop the bookmarks table, turning the original speaker’s uncertainty into a destructive joke.

• @ithueti / 10682 2023-10-27