From: | Andrew Dunstan <andrew(at)dunslane(dot)net> |
---|---|
To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Noah Misch <noah(at)leadboat(dot)com> |
Cc: | pgsql-hackers(at)lists(dot)postgresql(dot)org |
Subject: | Re: Tightening up allowed custom GUC names |
Date: | 2021-02-11 20:04:17 |
Message-ID: | b7ef059e-4897-d2c2-62cb-7c5ebdc40f3e@dunslane.net |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
On 2/11/21 1:32 PM, Tom Lane wrote:
> Noah Misch <noah(at)leadboat(dot)com> writes:
>> On Tue, Feb 09, 2021 at 05:34:37PM -0500, Tom Lane wrote:
>>> * A case could be made for tightening things up a lot more, and not
>>> allowing anything that doesn't look like an identifier. I'm not
>>> pushing for that, as it seems more likely to break existing
>>> applications than the narrow restriction proposed here. But I could
>>> live with it if people prefer that way.
>> I'd prefer that. Characters like backslash, space, and double quote have
>> significant potential to reveal bugs, while having negligible application
>> beyond revealing bugs.
> Any other opinions here? I'm hesitant to make such a change on the
> basis of just one vote.
>
>
That might be a bit restrictive. I could at least see allowing '-' as
reasonable, and maybe ':'. Not sure about other punctuation characters.
OTOH I'd be surprised if the identifier restriction would burden a large
number of people.
cheers
andrew
--
Andrew Dunstan
EDB: https://www.enterprisedb.com
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2021-02-11 20:23:31 | Re: parse mistake in ecpg connect string |
Previous Message | Robert Haas | 2021-02-11 19:50:13 | Re: Tightening up allowed custom GUC names |