docs: add warning in 'to_sql'

pandas-dev · Jan 3, 2025 · 77dc01c · 77dc01c
1 parent c00298a
commit 77dc01c
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pandas/io/sql.py b/pandas/io/sql.py
@@ -750,6 +750,11 @@ def to_sql(
     """
     Write records stored in a DataFrame to a SQL database.
 
+    .. warning::
+
+        This method can run arbitrary code which can make you vulnerable to code
+        injection if you pass user input to the `name` argument.
+
     Parameters
     ----------
     frame : DataFrame, Series