title: Is a SQLAlchemy query vulnerable to injection attacks?
body: <p>I have the following query that uses <code>like</code> to search a blog.  I am not sure if I'm making myself vulnerable to a SQL injection attack if I do this.  How is SQLAlchemy handling this?  Is it safe?</p>
  
  <pre><code>search_results = Blog.query.with_entities(Blog.blog_title).filter(Blog.blog_title.like("%"+ searchQuery['queryText'] +"%")).all()
  </code></pre>