add raw note

vapor · Mar 22, 2017 · 3365a70 · 3365a70
1 parent c052194
commit 3365a70
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Sources/Fluent/Database/Executor.swift b/Sources/Fluent/Database/Executor.swift
@@ -22,6 +22,10 @@ public protocol Executor {
     ///
     /// This allows Fluent extensions to be written that
     /// can support custom querying behavior.
+    ///
+    /// - note: Passing parameterized values as a `[Node]` array
+    ///         instead of interpolating them into the raw string
+    ///         can help prevent SQL injection.
     @discardableResult
     func raw(_ raw: String, _ values: [Node]) throws -> Node
 }