From 8f1500e118a75ae40c0fec1802d19a787dcf5fd5 Mon Sep 17 00:00:00 2001
From: Chris Langhout <clanghout@users.noreply.github.com>
Date: Thu, 4 Jul 2024 11:16:40 +0200
Subject: [PATCH] fix: use parameterized query

Signed-off-by: Chris Langhout <clanghout@bol.com>
---
 .../src/entrypoints/database/connectors/postgres.ts             | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/backend-defaults/src/entrypoints/database/connectors/postgres.ts b/packages/backend-defaults/src/entrypoints/database/connectors/postgres.ts
index 444bbc0d18..7d9d943fc7 100644
--- a/packages/backend-defaults/src/entrypoints/database/connectors/postgres.ts
+++ b/packages/backend-defaults/src/entrypoints/database/connectors/postgres.ts
@@ -52,7 +52,7 @@ export function createPgDatabaseClient(
     database.client.pool.on(
       'createSuccess',
       async (_event: number, pgClient: Client) => {
-        await pgClient.query(`SET ROLE ${role}`);
+        await pgClient.query('SET ROLE $1', [role]);
       },
     );
   }