SQL injection and incrementing values

[siriscmv]

Hey, I have a few questions:

1. When using the sql template string (import { sql } from 'drizzle-orm'), is the input string processed to prevent sql injections?
2. If I want to do something like UPDATE foo set bar = bar + 1, how would I do it with drizzle?

[ashokkmr22]

db.update(foo) .set({ bar: sql'${foo.bar} + 1' })
or
UPDATE ${foo} set bar = ${foo.bar} + 1

This will work