Having logical URLs for your search results isn't SQL injection:

https://jet.com/search?term=Sony%20OR%20Samsung

Look, it even guessed the product category based on my search term.

Back in the day search engines used to have these things called logical operators, then basically Google deprecated them.

Wouldn't https://jet.com/search?term=%27%20AND%203*1=2*1%27 be false if that were true?

except that they use EventStore as their main db..

[1]https://qconnewyork.com/ny2014/presentation/event-driven-ser...

pretty sure this is because they use ElasticSearch and have Groovy extensions enabled. Doubtful that any website trying to reach scale would use a sql db for search.

OK that's hilarious.