Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <pgsql-committers-owner+archive@lists.postgresql.org>)
	id 1wNXdU-000t8M-1B
	for pgsql-committers@arkaria.postgresql.org;
	Thu, 14 May 2026 15:06:04 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.96)
	(envelope-from <pgsql-committers-owner+archive@lists.postgresql.org>)
	id 1wNX4Q-00D65Y-0C
	for pgsql-committers@arkaria.postgresql.org;
	Thu, 14 May 2026 14:29:50 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <noah@leadboat.com>)
	id 1wMPeA-000mV6-0G
	for pgsql-committers@lists.postgresql.org;
	Mon, 11 May 2026 12:22:06 +0000
Received: from mahout.postgresql.org ([72.32.157.227])
	by makus.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.2)
	(envelope-from <noah@leadboat.com>)
	id 1wMPe7-000000002RT-2A05
	for pgsql-committers@lists.postgresql.org;
	Mon, 11 May 2026 12:22:05 +0000
Received: from gemulon.postgresql.org ([72.32.157.198])
	by mahout.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <noah@leadboat.com>)
	id 1wMPbr-0005aq-0M
	for pgsql-committers@lists.postgresql.org;
	Mon, 11 May 2026 12:19:43 +0000
Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org)
	by gemulon.postgresql.org with esmtp (Exim 4.96)
	(envelope-from <noah@leadboat.com>)
	id 1wMPbk-0002TC-2g
	for pgsql-committers@lists.postgresql.org;
	Mon, 11 May 2026 12:19:37 +0000
Content-Type: multipart/mixed; boundary="===============3294003226553195618=="
MIME-Version: 1.0
From: Noah Misch <noah@leadboat.com>
To: pgsql-committers@lists.postgresql.org
Subject: pgsql: pg_createsubscriber: Obstruct SQL injection via subscription
 nam
X-Auto-Response-Suppress: All
Auto-Submitted: auto-generated
Message-Id: <E1wMPbk-0002TC-2g@gemulon.postgresql.org>
Date: Mon, 11 May 2026 12:19:37 +0000
List-Id: <pgsql-committers.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-committers@lists.postgresql.org>
List-Owner: <mailto:pgsql-committers-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-committers>
Archived-At: 
 <https://www.postgresql.org/message-id/E1wMPbk-0002TC-2g%40gemulon.postgresql.org>
Precedence: bulk

--===============3294003226553195618==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
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--===============3294003226553195618==--