Re:Fuzzing Go APIs for SQL Injection
by evmunro on Wednesday August 31, 2022 @03:19PM
(#32667039)
You're right, it's likely that almost nobody is using `fmt.Sprintf` to build SQL queries in production.
Templating and `fmt.Sprintf` are essentially the same thing in this context - `Sprintf` just gets the point across in fewer lines of code, and allows people to come up with realistic scenarios themselves.
Templating and `fmt.Sprintf` are essentially the same thing in this context - `Sprintf` just gets the point across in fewer lines of code, and allows people to come up with realistic scenarios themselves.