The inserts in copy_from_parquet.go and copy_from_parquet_partitioned.go dump raw values into the CQL string when performing their inserts instead of using parameterized values. In contrast the inserts in copy.go correctly use placeholders to parameterize the values.
Not using parameterized queries risks bad formatting of binary values and more importantly allows for CQL injections via a malicious parquet file.
The inserts in
copy_from_parquet.goandcopy_from_parquet_partitioned.godump raw values into the CQL string when performing their inserts instead of using parameterized values. In contrast the inserts incopy.gocorrectly use placeholders to parameterize the values.Not using parameterized queries risks bad formatting of binary values and more importantly allows for CQL injections via a malicious parquet file.