I failed to answer this well unfortunately. Interview nerves. In retrospect you sanitize the input, and using JDBI (which I was in this case) can use prepared statements to do this for you.