It's never 'untrusted user input', but could be 'worrisome junior developer input'.
I didn't realize that I could attach the bindparam to `text()`. This is exactly what I should have wanted in the first place! -- You received this message because you are subscribed to the Google Groups "sqlalchemy" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/sqlalchemy. For more options, visit https://groups.google.com/d/optout.
