ActiveRecord::ConnectionAdapters::OracleEnhancedAdapter#quote 是否可以防止 SQL 注入？

Question

这种方法可以保护我们免受 SQL 注入吗？

https://www.rubydoc.info/github/rsim/oracle-enhanced/ActiveRecord%2FConnectionAdapters%2FOracleEnhancedAdapter:quote

Answer 1

是的，确实如此。我们可以查看文档为证：https://api.rubyonrails.org/classes/ActiveRecord/ConnectionAdapters/Quoting.html#method-i-quote