Examples/Safe_TaintedConfig_1.ps1

function Set-DbConfigSafe {
    param($catalog, [System.Collections.Generic.HashSet[string]]$validCatalogNames)

    if(-not $validCatalogNames.Contains($catalog)) {
        return
    }

    $dbConnection = New-Object psobject
    $dbConnection.ConnectionString = "Data Source=.;Initial Catalog=$catalog;User ID=sa;Password=pass;"
    return $dbConnection
}