We're looking at locking down our code to make sure we cover any injection possibilities.
Some of our queries use VALUES to specify a number of values at once.
Is it possible to use .parameter() to set a list of values?
The JavaDoc seems to indicate that you can only set a single value for a variable.
eg
SelectQuery query = "
SELECT ?s
WHERE {
VALUES (?o) { ?oValues }
?s ?p ?o .
}"
and supply ?oValues values using something like
query.parameter("oValues",List)