]> granicus.if.org Git - postgresql/commit
Document security implications of qualified names.
authorNoah Misch <noah@leadboat.com>
Sun, 29 Jul 2018 03:08:01 +0000 (20:08 -0700)
committerNoah Misch <noah@leadboat.com>
Sun, 29 Jul 2018 03:08:29 +0000 (20:08 -0700)
commit5eecc1cafdbddb21def03e4dd52eb8acf66b6efd
treeb0bf90c247d20a37dc03597418c7c8dcebbb610e
parent03131abe9b24a9806987f356da53a7a2440f3259
Document security implications of qualified names.

Commit 5770172cb0c9df9e6ce27c507b449557e5b45124 documented secure schema
usage, and that advice suffices for using unqualified names securely.
Document, in typeconv-func primarily, the additional issues that arise
with qualified names.  Back-patch to 9.3 (all supported versions).

Reviewed by Jonathan S. Katz.

Discussion: https://postgr.es/m/20180721012446.GA1840594@rfd.leadboat.com
doc/src/sgml/ddl.sgml
doc/src/sgml/ref/create_function.sgml
doc/src/sgml/syntax.sgml
doc/src/sgml/typeconv.sgml
doc/src/sgml/xfunc.sgml
src/backend/utils/adt/ruleutils.c