Thread: Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file

Sergey Burladyan <eshkinkot@gmail.com> writes:
> [ xmlvalidate is a security hole ]

Given that this function is not documented nor tested in the regression
tests, I propose diking it out entirely.
        regards, tom lane


Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file

From
Peter Eisentraut
Date:
Am Freitag, 29. Februar 2008 schrieb Tom Lane:
> Sergey Burladyan <eshkinkot@gmail.com> writes:
> > [ xmlvalidate is a security hole ]
>
> Given that this function is not documented nor tested in the regression
> tests, I propose diking it out entirely.

Yes, it was accidentally left over from previous work.  We should have removed 
it before the release, but that would have required an initdb.


Peter Eisentraut escribió:
> Am Freitag, 29. Februar 2008 schrieb Tom Lane:
> > Sergey Burladyan <eshkinkot@gmail.com> writes:
> > > [ xmlvalidate is a security hole ]
> >
> > Given that this function is not documented nor tested in the regression
> > tests, I propose diking it out entirely.
> 
> Yes, it was accidentally left over from previous work.  We should have removed 
> it before the release, but that would have required an initdb.

So let's change it for a function that elog(ERROR)s on entry.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support


Alvaro Herrera <alvherre@commandprompt.com> writes:
> Peter Eisentraut escribi�:
>> Yes, it was accidentally left over from previous work.  We should have removed 
>> it before the release, but that would have required an initdb.

> So let's change it for a function that elog(ERROR)s on entry.

Yeah, I was just going to make it throw a "not implemented" error.
        regards, tom lane