AI 시대의 보안을 위한 Snyk의 5가지 개발자 경험(DX) 원칙

// Vulnerable: Unsanitized user input directly concatenated into SQL query
- const query = `SELECT * FROM users WHERE username = '${username}' AND password = '${password}'`;
+ const query = 'SELECT * FROM users WHERE username = ? AND password = ?';

  let db = new sqlite3.Database('./database.db');
- db.get(query, (err, row) => {
+ db.get(query, [username, password], (err, row) => {
    if (err) {
      return res.status(500).send('An error occurred');
    }
  });