Can't add schema name to query in fetch function

• asyncpg version: 0.18.3
• PostgreSQL version: 11.4 +
• Do you use a PostgreSQL SaaS? If so, which? Can you reproduce
  the issue with a local PostgreSQL install?: No
• Python version: Python 3.7.3
• Platform: MacOS, Sanic
• Do you use pgbouncer?: No
• Did you install asyncpg with pip?: Yes
• If you built asyncpg locally, which version of Cython did you use?: No
• Can the issue be reproduced under both asyncio and
  uvloop?: No

I had try to up to 0.20.1 but I have an other error in your code, so I only test on version 0.18.3

I got a problem when I try to add schema name to the query. My code:

dbpool = app.config["pool"]
async with dbpool.acquire() as conn:
    sql = """
        SELECT _id, name, address
        FROM "{schema}".account
        WHERE _id IN (
            SELECT account_id
            FROM "{schema}"."account-message"
            WHERE message_id IN (
                SELECT _id
                FROM "{schema}".message
                WHERE sender = $1
            )
        );
    """.format(
        schema=config.SCHEMA
    )
    resp = await conn.fetch(sql, address)

and it work very well, except for the lint:security give me a security issue:

Issue: [B608:hardcoded_sql_expressions] Possible SQL injection vector through string-based query construction.

And when I try to pass my schema name to conn.fetch() function but it didn't work. Can you help me?

Inizia con la chiamata conn.fetch() e la query PostgreSQL mostrata nell’issue, quindi verifica come vengono passati i nomi degli schemi alle query e come il binding dei parametri tratta gli identificatori. Il lavoro è completato quando è stato determinato se è supportato un approccio sicuro ai nomi degli schemi e la segnalazione relativa a lint/sicurezza è stata documentata o risolta.