News for hackers. Stuff that matters.
Re:Fuzzing Go APIs for SQL Injection by evmunro on Wednesday August 31, 2022 @03:19PM (#32667039)
You're right, it's likely that almost nobody is using `fmt.Sprintf` to build SQL queries in production.

Templating and `fmt.Sprintf` are essentially the same thing in this context - `Sprintf` just gets the point across in fewer lines of code, and allows people to come up with realistic scenarios themselves.

Re:Fuzzing Go APIs for SQL Injection by oefrha on Wednesday August 31, 2022 @03:56PM (#32667499)
I’m talking about HTML templating, not templating SQL statements.