title: Why is it safe to write GraphQL queries client-side?
body: <p><a href="https://github.com/facebook/graphql" rel="noreferrer">GraphQL</a> was recently released, and it seems to encourage writing your queries client-side.</p>
  
  <ol>
  <li>What is it that makes it safe to write GraphQL queries client-side, but not SQL queries?</li>
  <li>Is GraphQL not subject to injections?</li>
  <li>If it's so useful to have your queries client-side, why not make a version of SQL not subject to injections?</li>
  </ol>