Re: POC: Carefully exposing information without authentication

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Daniel Gustafsson <daniel(at)yesql(dot)se>
Cc: Greg Sabino Mullane <htamfids(at)gmail(dot)com>, Andres Freund <andres(at)anarazel(dot)de>, Antonin Houska <ah(at)cybertec(dot)at>, "pgsql-hackers(at)lists(dot)postgresql(dot)org" <pgsql-hackers(at)lists(dot)postgresql(dot)org>
Subject: Re: POC: Carefully exposing information without authentication
Date: 2026-09-16 14:20:57
Message-ID: 496975.1789568457@sss.pgh.pa.us
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Daniel Gustafsson <daniel(at)yesql(dot)se> writes:
> To be honest, I am absolutely terrified by any feature which does any level of
> work based on user input before authentication or authorization.

Yeah. TBH, I can't see this ever getting committed.

regards, tom lane

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Matthias van de Meent 2026-09-16 14:22:52 Re: [PATCH] Remove unused PageIsPredicateLocked()
Previous Message Heikki Linnakangas 2026-09-16 14:08:29 Re: pgsql: Revert online data checksum transitions