如何使用Entity Framework Core和Npgsql清理所有字符串输入？

using Microsoft.EntityFrameworkCore;
using Npgsql.EntityFrameworkCore.PostgreSQL;

public class MyDbContext : DbContext
{
    public DbSet<MyEntity> MyEntities { get; set; }

    protected override void OnConfiguring(DbContextOptionsBuilder optionsBuilder)
    {
        optionsBuilder.UseNpgsql("your_connection_string");
    }
}

using (var context = new MyDbContext())
{
    var userInput = "user input"; // 用户输入的字符串

    var query = $"SELECT * FROM MyEntities WHERE Name = @name";
    var parameter = new NpgsqlParameter("@name", userInput);

    var result = context.MyEntities.FromSqlRaw(query, parameter).ToList();
}