LiteJQ: Jq Support in SQLite

LiteJQ: Jq Support in SQLite(github.com)

11 points by jeroenjanssens 2 years ago | 2 comments

adius 2 years ago |

Thanks, this is really helpful!

Is there any way to write "malicious" jq code (endless loops, IO, …)?

fforflo 2 years ago | |

Any input passed to jq(text,text) is directly passed through to jq's internal compiler, so it's a job left for that.

Now, can jq be used for SQL injection in an SQLite context? That's interesting in theory, but I'd assume any decent driver would validate its input as data and not code.