Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commitc6a26e4

Browse files
committed
Doc: stop implying recommendation of insecure search_path value.
SQL "SET search_path = 'pg_catalog, pg_temp'" is silently equivalent to"SET search_path = pg_temp, pg_catalog, "pg_catalog, pg_temp"" insteadof the intended "SET search_path = pg_catalog, pg_temp". (The intentwas a two-element search path. With the single quotes, it insteadspecifies one element with a comma and a space in the middle of theelement.) In addition to the SET statement, this affects SET clauses ofCREATE FUNCTION, ALTER ROLE, and ALTER DATABASE. It does not affect theset_config() SQL function.Though the documentation did not show an insecure command, remove singlequotes that could entice a reader to write an insecure command.Back-patch to v13 (all supported versions).Reported-by: Sven Klemm <sven@timescale.com>Author: Sven Klemm <sven@timescale.com>Backpatch-through: 13
1 parent0064020 commitc6a26e4

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

‎doc/src/sgml/extend.sgml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1344,8 +1344,8 @@ SELECT * FROM pg_extension_update_paths('<replaceable>extension_name</replaceabl
13441344
secure <varname>search_path</varname>; do <emphasis>not</emphasis>
13451345
trust the path provided by <command>CREATE/ALTER EXTENSION</command>
13461346
to be secure. Best practice is to temporarily
1347-
set <varname>search_path</varname> to <literal>'pg_catalog,
1348-
pg_temp'</literal> and insert references to the extension's
1347+
set <varname>search_path</varname> to <literal>pg_catalog,
1348+
pg_temp</literal> and insert references to the extension's
13491349
installation schema explicitly where needed. (This practice might
13501350
also be helpful for creating views.) Examples can be found in
13511351
the <filename>contrib</filename> modules in

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp