Revert "fix: pass query_ids as parameter to prevent SQL injection (#16)"

This reverts commit cd1f454.
smartive · Oct 22, 2024 · 7ea911b · 7ea911b
1 parent cd1f454
commit 7ea911b
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/src/cache-tags.ts b/src/cache-tags.ts
@@ -62,10 +62,8 @@ export const queriesReferencingCacheTags = async (cacheTags: CacheTag[]): Promis
   if (!cacheTags?.length) {
     return [];
   }
-  const placeholders = cacheTags.map(() => '?').join(', ');
   const { rows }: { rows: { query_id: string }[] } = await sql.query(
-    `SELECT DISTINCT query_id FROM query_cache_tags WHERE cache_tag IN (${placeholders})`,
-    cacheTags,
+    `SELECT DISTINCT query_id FROM query_cache_tags WHERE cache_tag IN (${cacheTags.map((cacheTag) => `'${cacheTag}'`).join(', ')})`,
   );
 
   return rows.map((row) => row.query_id);