Day 18 10 min
Cross-site scripting
1 / 11 · ≈ 9 min left
Warm-up
From yesterday. Answer from memory: a wrong guess still helps you remember.
A developer writes cursor.execute("SELECT * FROM person WHERE last_name = '%s'", [name]). What do Django's docs say about it?