Glossary: Endpoint and Application Security

parameterized query

Also written: ? parameters, query parameters

A database query where input is passed separately, for example as a ? parameter, so it can never become SQL even if validation is too loose.