Re: [PATCH] Include application_name in "connection authorized" log message

From: Andres Freund <andres(at)anarazel(dot)de>
To: Stephen Frost <sfrost(at)snowman(dot)net>
Cc: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>, Don Seiler <don(at)seiler(dot)us>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-hackers(at)lists(dot)postgresql(dot)org
Subject: Re: [PATCH] Include application_name in "connection authorized" log message
Date: 2018-09-27 21:46:44
Message-ID: 20180927214644.6th4brxsfznzye7b@alap3.anarazel.de
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi,

On 2018-09-27 17:41:56 -0400, Stephen Frost wrote:
> Of course, if I'm missing something as to why the ascii-cleaning makes
> sense or is necessary, I'm all ears, but I'm just not seeing it.

There's many reasons. For example you can send terminal control
characters to the server. When somebody then looks at the log, you can
screw with them pretty good, unless they're always careful to go through
less (without -r). We should be *more* not *less* careful about this
kind of hting.

Greetings,

Andres Freund

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Thomas Munro 2018-09-27 21:48:40 Re: Collation versioning
Previous Message Stephen Frost 2018-09-27 21:41:56 Re: [PATCH] Include application_name in "connection authorized" log message