filtering step. Be careful of argument injection (CWE-88).
Instead of building a new implementation, such features may be available in the database
or programming language. For example, the Oracle DBMS_ASSERT package can check
or enforce that parameters have certain properties that make them less vulnerable to SQL