Re: [Virtuoso-users] Built-in Protection against SQL / SPARQL Injections.

2011-04-18 Thread Hugh Williams
Hi Herman, The Virtuoso SPARQL endpoint can be configured for secure access on an a secure port using WebID and ACLs to control access to the server as detailed in section 16.2.3.4. Service Endpoint Security of the online documentation at:

Re: [Virtuoso-users] Built-in Protection against SQL / SPARQL Injections.

2011-04-18 Thread Ivan Mikhailov
Hello Herman, There are all sorts of security tweaks, but there's no built-in tagging of data strings as safe/unsafe, if you mean this. The reason is that you don't have to form SQL strings by concatenation of parts of different origin and worry about escaping of constants; you have the whole