Send table_name via query_params

[azhe403]

Is possible send table_name via query_params?

curl \
  --data-urlencode 'table_name=public.table_name' \
  --data-urlencode 'objectParam={"answer" : 42}' \
  --get localhost:3000/rpc/public.function_source/0/0/0.pbf

[stepankuzmin]

Hi @azhe403

Yes, that should be possible. In your case, table_name will be accessible as query_params->'table_name' in your public.function_source function. However, it may introduce security vulnerability, so be careful

[azhe403]

I've try it. and when creating function, i got error like in picture 2

I've added ( ) replace -> with ->> but same.

Also I add declare variable too, but variable table_name known as name table, not a value of table_name

Any solution about this?