The libpq documentation contains this:
"""
<productname>PostgreSQL</productname> provides a fast-path interface to
send function calls to the backend. This is a trapdoor into system
internals and can be a potential security hole. Most users will not need
this feature.
"""
Why and under what circumstances is this a security hole, and what is a
user to do about it?
--
Peter Eisentraut peter_e(at)gmx(dot)net