postgres.git / summary / log / commit / refs

commit    670050d68f32b4945528ace8dcef9eb4aabcbd8a
Author:   Noah Misch <noah@leadboat.com>
Date:     Mon Aug 10 16:22:54 2020 +0000
First released in: 14.0, 10.14, 11.9, 12.4, 13.0

    Move connect.h from fe_utils to src/include/common.
    
    Any libpq client can use the header.  Clients include backend components
    postgres_fdw, dblink, and logical replication apply worker.  Back-patch
    to v10, because another fix needs this.  In released branches, just copy
    the header and keep the original.


 src/include/common/connect.h | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/src/include/common/connect.h b/src/include/common/connect.h
new file mode 100644
index 00000000000..2cc5d7dd251
--- /dev/null
+++ b/src/include/common/connect.h
@@ -0,0 +1,28 @@
+/*-------------------------------------------------------------------------
+ *
+ * Interfaces in support of FE/BE connections.
+ *
+ *
+ * Portions Copyright (c) 1996-2020, PostgreSQL Global Development Group
+ * Portions Copyright (c) 1994, Regents of the University of California
+ *
+ * src/include/common/connect.h
+ *
+ *-------------------------------------------------------------------------
+ */
+#ifndef CONNECT_H
+#define CONNECT_H
+
+/*
+ * This SQL statement installs an always-secure search path, so malicious
+ * users can't take control.  CREATE of an unqualified name will fail, because
+ * this selects no creation schema.  This does not demote pg_temp, so it is
+ * suitable where we control the entire FE/BE connection but not suitable in
+ * SECURITY DEFINER functions.  This is portable to PostgreSQL 7.3, which
+ * introduced schemas.  When connected to an older version from code that
+ * might work with the old server, skip this.
+ */
+#define ALWAYS_SECURE_SEARCH_PATH_SQL \
+	"SELECT pg_catalog.set_config('search_path', '', false);"
+
+#endif							/* CONNECT_H */


[parent: 96cbfe92d7f0]