In that case following options came to my mind with their respective concerns
- The DB approach mentioned in the database itself is with protection against SQL Injection
Concern: Sorry to put this option, as I haven't tested it against SQL Injection. So just need to confirm whether my assumption is true or not.
- Already provided approach
Concern: If any other approach is already provided then please let me know, as I am naive to Jaggerjs and trying out all the examples
- To build own API which would work like PrepredStatemet of Java with parameterized enforcing strict type checking and protect against SQL Injection
Concern: What all character escaping I need to do to protect against SQL Injection just like we do with Cross Site Scripting issue by doing HTML encoding?
Here I have successfully executed some encryption algorithms using their already existing Java implementation, if in this way I need to contribute and create own API please let me know, I would like to make it as an opensource library for Jaggeryjs. This API then will contain the protection against OWASP top 10 attacks to develop secure products with secure coding standards.