Top 10 OWASP security design - non SQL

[aramkrishna6]

Hi,

Per top 10 OWASP with SQL injection OWASP top 10 Web Application threats  |  Apigee Edge  |  Apigee Docs  will not be applicable or not required to backend, which don't have the SQL d.b but does this apply with Cloud Spanner or non SQL backends ?

@dino  @cjking 

[nmarkevich]

Hi @aramkrishna6,

Cloud Spanner does indeed use SQL syntax, which means it can be vulnerable to SQL injection attacks if not properly secured. While the risks may differ from traditional SQL databases, the core principle remains: any system that processes dynamic queries or user input is at risk of injection attacks if inputs aren't validated or sanitized.

So, even with non-SQL backends or databases like Cloud Spanner, it's important to follow secure coding practices to avoid injection vulnerabilities.

Let me know if you need further details!

Best,
Nikita