Azure Cosmos DB SQL Like，准备好的语句

Question

Azure Cosmos DB SQL Like API 是否提供等效的预准备语句以避免 SQL 注入？快速入门示例不涵盖该主题，我似乎找不到有关该主题的文档。

Answer 1

如果我理解正确你只需要使用SDK方法call the query with parameters。

{
    "query": "SELECT * FROM Families f WHERE f.lastName = @lastName AND f.address.state = @addressState",
    "parameters": [
        {"name": "@lastName", "value": "Wakefield"},
        {"name": "@addressState", "value": "NY"},
    ]
}

或者你说的是stored procedures？