Re: Forbid use of LF and CR characters in database and role names

From: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>
To: Michael Paquier <michael(dot)paquier(at)gmail(dot)com>, PostgreSQL mailing lists <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Forbid use of LF and CR characters in database and role names
Date: 2016-09-01 17:44:54
Message-ID: 5a62e31d-afd6-c638-be9d-24184ec0c46b@2ndquadrant.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On 8/11/16 9:12 PM, Michael Paquier wrote:
> Note that pg_dump[all] and pg_upgrade already have safeguards against
> those things per the same routines putting quotes for execution as
> commands into psql and shell. So attached is a patch to implement this
> restriction in the backend,

How about some documentation? I think the CREATE ROLE and CREATE
DATABASE man pages might be suitable places.

--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2016-09-01 17:55:32 Re: \timing interval
Previous Message Peter Eisentraut 2016-09-01 17:20:59 Re: pg_basebackup, pg_receivexlog and data durability (was: silent data loss with ext4 / all current versions)