SQL query function should support parameters #112
Description
The base.query method in the Python library doesn't currently support the parameters parameter which is supported in the underlying REST API.
As the REST API documentation mentions, this is an important security feature for preventing SQL injection attacks. Without it, values used in queries need to be manually escaped to handle characters that have special meaning in SQL, which is extremely error-prone.
From the REST API documentation:
Parameters in SQL clause to avoid sql injection. Only needed, if you use ? in the SQL statement. The parameters will replace the ? according to their order in the array.