Home Explore Help
Register Sign In
publics
/
go-sql-driver__mysql
0
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Browse Source

Bit detailed info about vulnerability when using multibyte encoding.

INADA Naoki 11 years ago
parent
e11c825316
commit
b4f0315a64
1 changed files with 1 additions and 1 deletions
Unified View Show Diff Stats
  1. 1 1
      README.md

+ 1 - 1
README.md
View File 

@@ -192,7 +192,7 @@ Default:        false
 
 
 
 When `interpolateParams` is true, calls to `sql.Db.Query()` and `sql.Db.Exec()` with params interpolates placeholders (`?`) with given params. This reduces roundtrips to database compared with `interpolateParams=false` since it uses prepare, exec and close to support parameters.
 
 When `interpolateParams` is true, calls to `sql.Db.Query()` and `sql.Db.Exec()` with params interpolates placeholders (`?`) with given params. This reduces roundtrips to database compared with `interpolateParams=false` since it uses prepare, exec and close to support parameters.
 
 
 
-NOTE: It make SQL injection vulnerability when connection encoding is not utf8.
 
+NOTE: It make SQL injection vulnerability when connection encoding is multibyte encoding except utf-8 (e.g. cp932).
 
 
 
 ##### `loc`
 
 ##### `loc`