[sql] Does sql transformer has any tag against Injection attack?

[milkwaybridge]

in esql, <esql:parameter> does this job, what does sql transformer have ? Thanks for your information!