Spring Data JPA 针对 SQL 注入是否安全

Spring Data JPA 中对 SQL 注入的安全性分析与案例

java
@Repository
public interface UserRepository extends JpaRepository {
    @Query("SELECT u FROM User u WHERE u.username = ?1 AND u.password = ?2")
    User findByUsernameAndPassword(String username, String password);
}

java
@Repository
public interface UserRepository extends JpaRepository {
    @Query("SELECT u FROM User u WHERE u.username = :username AND u.password = :password")
    User findByUsernameAndPassword(@Param("username") String username, @Param("password") String password);
}