
The masking filter should check for things like set @ssn = (SELECT ssn FROM users WHERE id = 1); so that select @ssn; is not possible.
The masking filter should check for things like set @ssn = (SELECT ssn FROM users WHERE id = 1); so that select @ssn; is not possible.