By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement . We’ll occasionally send you account related emails.

I was reading the docs for
https://v2.gorm.io/docs/security.html#SQL-injection-Methods

I believe it would be better if we escape such syntax in all the cases execpt for db.Exec where we wanna execute something on db.

Maybe create a method to drop from db

If we are building app with dynamic column select the user may execute such type of operation on select .