Hibernate named query prevents SQL injection attack?

Question

Hibernate's Named Query function helps prevent SQL Injection? I do not define named queries in the hbm.xml file as an annotation.

I am working on a Flex-Hibernate-JBoss application 

Answer 1

Yes. Read this How to Avoid SQL Injection in Hibernate and How to Fix SQL Injection in Hibernate .