Huh. pointing sqlite at an untrusted DB can be bad news. This isn’t really surprising, but it’s neat to see the research. I’m not sure if this is something we should act on. https://research.checkpoint.com/select-code_execution-from-using-sqlite/

That’s some awesome research!