Thread: Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file
Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file
From
Tom Lane
Date:
Sergey Burladyan <eshkinkot@gmail.com> writes: > [ xmlvalidate is a security hole ] Given that this function is not documented nor tested in the regression tests, I propose diking it out entirely. regards, tom lane
Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file
From
Peter Eisentraut
Date:
Am Freitag, 29. Februar 2008 schrieb Tom Lane: > Sergey Burladyan <eshkinkot@gmail.com> writes: > > [ xmlvalidate is a security hole ] > > Given that this function is not documented nor tested in the regression > tests, I propose diking it out entirely. Yes, it was accidentally left over from previous work. We should have removed it before the release, but that would have required an initdb.
Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file
From
Alvaro Herrera
Date:
Peter Eisentraut escribió: > Am Freitag, 29. Februar 2008 schrieb Tom Lane: > > Sergey Burladyan <eshkinkot@gmail.com> writes: > > > [ xmlvalidate is a security hole ] > > > > Given that this function is not documented nor tested in the regression > > tests, I propose diking it out entirely. > > Yes, it was accidentally left over from previous work. We should have removed > it before the release, but that would have required an initdb. So let's change it for a function that elog(ERROR)s on entry. -- Alvaro Herrera http://www.CommandPrompt.com/ PostgreSQL Replication, Consulting, Custom Development, 24x7 support
Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file
From
Tom Lane
Date:
Alvaro Herrera <alvherre@commandprompt.com> writes: > Peter Eisentraut escribi�: >> Yes, it was accidentally left over from previous work. We should have removed >> it before the release, but that would have required an initdb. > So let's change it for a function that elog(ERROR)s on entry. Yeah, I was just going to make it throw a "not implemented" error. regards, tom lane