]> granicus.if.org Git - postgresql/commit
Ensure that xpath() escapes special characters in string values.
authorTom Lane <tgl@sss.pgh.pa.us>
Wed, 20 Jul 2011 22:44:09 +0000 (18:44 -0400)
committerTom Lane <tgl@sss.pgh.pa.us>
Wed, 20 Jul 2011 22:44:35 +0000 (18:44 -0400)
commitaaf15e5c1cf8d2c27d2f9841343f00027762cb4e
treee9661afe4c1bab76a1ad72dedcc0364787104e87
parent17a16eeb7c4fd0c6dce80521247a20d76706b2bb
Ensure that xpath() escapes special characters in string values.

Without this it's possible for the output to not be legal XML, as
illustrated by the added regression test cases.

NB: this change will need to be called out as an incompatibility in the
9.2 release notes, since it's possible somebody was relying on the old
behavior, even though it's clearly wrong.

Florian Pflug, reviewed by Radoslaw Smogura
src/backend/utils/adt/xml.c
src/test/regress/expected/xml.out
src/test/regress/expected/xml_1.out
src/test/regress/sql/xml.sql