Обсуждение: Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file

Поиск
Список
Период
Сортировка

Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file

От
Tom Lane
Дата:
Sergey Burladyan <eshkinkot@gmail.com> writes:
> [ xmlvalidate is a security hole ]

Given that this function is not documented nor tested in the regression
tests, I propose diking it out entirely.
        regards, tom lane


Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file

От
Peter Eisentraut
Дата:
Am Freitag, 29. Februar 2008 schrieb Tom Lane:
> Sergey Burladyan <eshkinkot@gmail.com> writes:
> > [ xmlvalidate is a security hole ]
>
> Given that this function is not documented nor tested in the regression
> tests, I propose diking it out entirely.

Yes, it was accidentally left over from previous work.  We should have removed 
it before the release, but that would have required an initdb.


Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file

От
Alvaro Herrera
Дата:
Peter Eisentraut escribió:
> Am Freitag, 29. Februar 2008 schrieb Tom Lane:
> > Sergey Burladyan <eshkinkot@gmail.com> writes:
> > > [ xmlvalidate is a security hole ]
> >
> > Given that this function is not documented nor tested in the regression
> > tests, I propose diking it out entirely.
> 
> Yes, it was accidentally left over from previous work.  We should have removed 
> it before the release, but that would have required an initdb.

So let's change it for a function that elog(ERROR)s on entry.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support


Re: [BUGS] bug or not bug, xmlvalidate(xml, text) can read and show one line from file

От
Tom Lane
Дата:
Alvaro Herrera <alvherre@commandprompt.com> writes:
> Peter Eisentraut escribi�:
>> Yes, it was accidentally left over from previous work.  We should have removed 
>> it before the release, but that would have required an initdb.

> So let's change it for a function that elog(ERROR)s on entry.

Yeah, I was just going to make it throw a "not implemented" error.
        regards, tom lane