Run parameterized queries  |  BigQuery  |  Google Cloud Documentation

Configure BigQuery query parameters for GoogleSQL. Protect against SQL injection.