'Mysql INSERT INTO SET ? syntax

await query(`INSERT INTO feedback.app_v2 SET ?`, feedback)

I wrote this line to code into my JS project to insert data in the concerning table.

I want to ask if this MySql syntax is safe from Sql Injection? Here feedback is an object whose keys matches the app_v2 table columns.



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source