fix: use parameterized query

Signed-off-by: Chris Langhout <clanghout@bol.com>
2024-07-04 11:16:40 +02:00
parent e78fbec111
commit 8f1500e118
1 changed files with 1 additions and 1 deletions
@@ -52,7 +52,7 @@ export function createPgDatabaseClient(
    database.client.pool.on(
      'createSuccess',
      async (_event: number, pgClient: Client) => {
-        await pgClient.query(`SET ROLE ${role}`);
+        await pgClient.query('SET ROLE $1', [role]);
      },
    );
  }