Comment on Two Active Record SQL Injection Vulnerabilities Affecting PostgreSQLparentComments−joevandyk12yNo, ActiveRecord uses bind variables. It uses prepared statements in some cases.
Comments
No, ActiveRecord uses bind variables. It uses prepared statements in some cases.