Django如果使用原始SQL，应该采取哪些步骤来避免SQL注入攻击?

I have read that ORM's should minimise the possibilities of SQL injection attacks. However in Django, sometimes the ORM is somewhat limited, and I need to use raw SQL. What steps should I take to avoid SQL injection attacks?I have read that ORM's should minimise the poss