why are f strings vulnerable to SQL injection but the % operator (for strings, not modulo) isn’t?
@cam where did you hear this?
@wallhackio idk where I first heard it I’ve just heard that python f strings are vulnerable to sql injection but string substitution with % isn’t
@wallhackio to be fair the best practice is to use prepared statements anyway