Everyone, asking a question here related to Raymond Nijssen's challenge... On Wed, Jun 17, 2026 at 12:06 PM Raymond Nijssen via QGIS-Developer < [email protected]> wrote:
[snip] > > I fixed it by using the `# nosec` comment behind all the lines with SQL > strings. Feels a bit strange though to "fix" things that are not bad or > broken at all. > > > > > Le 17/06/2026 à 18:40, Raymond Nijssen via QGIS-Developer a écrit : > >> Hi, I'm having this security issue with Bandit and cannot publish my > >> plugin. But the executeSql() does not take separate parameters. What > >> would be the proper solution here? Is there really no prepared statement approach that could be used in cases like this, instead of an "executeSql() that does not take separate parameters"? -- Chris Hermansen · clhermansen "at" gmail "dot" com C'est ma façon de parler.
_______________________________________________ QGIS-Developer mailing list [email protected] List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer
