Is Nhibernate Vulnerable to SQL Injection?
nhibernate, sql
Solution
If you're using the criteria generators then no. nHibernate is aware of the .Net types and is consequently able to handle all escaping for you when generating queries.
Unparameterized HQL is vulnerable however.
Problem
Just wanted to know if there is a big chance to inject SQL While using nhibernate?