Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit16f911c

Browse files
committed
Doc: stop implying recommendation of insecure search_path value.
SQL "SET search_path = 'pg_catalog, pg_temp'" is silently equivalent to"SET search_path = pg_temp, pg_catalog, "pg_catalog, pg_temp"" insteadof the intended "SET search_path = pg_catalog, pg_temp". (The intentwas a two-element search path. With the single quotes, it insteadspecifies one element with a comma and a space in the middle of theelement.) In addition to the SET statement, this affects SET clauses ofCREATE FUNCTION, ALTER ROLE, and ALTER DATABASE. It does not affect theset_config() SQL function.Though the documentation did not show an insecure command, remove singlequotes that could entice a reader to write an insecure command.Back-patch to v13 (all supported versions).Reported-by: Sven Klemm <sven@timescale.com>Author: Sven Klemm <sven@timescale.com>Backpatch-through: 13
1 parent715241d commit16f911c

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

‎doc/src/sgml/extend.sgml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1300,8 +1300,8 @@ SELECT * FROM pg_extension_update_paths('<replaceable>extension_name</replaceabl
13001300
secure <varname>search_path</varname>; do <emphasis>not</emphasis>
13011301
trust the path provided by <command>CREATE/ALTER EXTENSION</command>
13021302
to be secure. Best practice is to temporarily
1303-
set <varname>search_path</varname> to <literal>'pg_catalog,
1304-
pg_temp'</literal> and insert references to the extension's
1303+
set <varname>search_path</varname> to <literal>pg_catalog,
1304+
pg_temp</literal> and insert references to the extension's
13051305
installation schema explicitly where needed. (This practice might
13061306
also be helpful for creating views.) Examples can be found in
13071307
the <filename>contrib</filename> modules in

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp