pgsql: Add: > * Prevent malicious functions from being executed with

Started by Bruce Momjianover 18 years ago1 messagescomitters
Jump to latest
#1Bruce Momjian
bruce@momjian.us

Log Message:
-----------
Add:

* Prevent malicious functions from being executed with the permissions
of unsuspecting users

Index functions are safe, so VACUUM and ANALYZE are safe too.
Triggers, CHECK and DEFAULT expressions, and rules are still vulnerable.
http://archives.postgresql.org/pgsql-hackers/2008-01/msg00268.php

Modified Files:
--------------
pgsql/doc:
TODO (r1.2261 -> r1.2262)
(http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/doc/TODO?r1=1.2261&r2=1.2262)
pgsql/doc/src/FAQ:
TODO.html (r1.770 -> r1.771)
(http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/doc/src/FAQ/TODO.html?r1=1.770&r2=1.771)