Tom Lane 3d4dc1acf5 Add a new GUC parameter backslash_quote, which determines whether the SQL ... parser will allow "\'" to be used to represent a literal quote mark. The "\'" representation has been deprecated for some time in favor of the SQL-standard representation "''" (two single quote marks), but it has been used often enough that just disallowing it immediately won't do. Hence backslash_quote allows the settings "on", "off", and "safe_encoding", the last meaning to allow "\'" only if client_encoding is a valid server encoding. That is now the default, and the reason is that in encodings such as SJIS that allow 0x5c (ASCII backslash) to be the last byte of a multibyte character, accepting "\'" allows SQL-injection attacks as per CVE-2006-2314 (further details will be published after release). The "on" setting is available for backward compatibility, but it must not be used with clients that are exposed to untrusted input. Thanks to Akio Ishida and Yasuo Ohgaki for identifying this security issue.		2006-05-21 20:11:02 +00:00
..
analyze.h	Implement sharable row-level locks, and use them for foreign key references	2005-04-28 21:47:18 +00:00
gramparse.h	Add a new GUC parameter backslash_quote, which determines whether the SQL	2006-05-21 20:11:02 +00:00
keywords.h	Tag appropriate files for rc3	2004-12-31 22:04:05 +00:00
parse_agg.h	Tag appropriate files for rc3	2004-12-31 22:04:05 +00:00
parse_clause.h	Tag appropriate files for rc3	2004-12-31 22:04:05 +00:00
parse_coerce.h	Tag appropriate files for rc3	2004-12-31 22:04:05 +00:00
parse_expr.h	Tag appropriate files for rc3	2004-12-31 22:04:05 +00:00
parse_func.h	Tag appropriate files for rc3	2004-12-31 22:04:05 +00:00
parse_node.h	Standard pgindent run for 8.1.	2005-10-15 02:49:52 +00:00
parse_oper.h	Tag appropriate files for rc3	2004-12-31 22:04:05 +00:00
parse_relation.h	Replace the parser's namespace tree (which formerly had the same	2005-06-05 00:38:11 +00:00
parse_target.h	Standard pgindent run for 8.1.	2005-10-15 02:49:52 +00:00
parse_type.h	Remove typeidIsValid() checks in can_coerce_type(). These checks	2005-05-29 18:24:14 +00:00
parser.h	Tag appropriate files for rc3	2004-12-31 22:04:05 +00:00
parsetree.h	Standard pgindent run for 8.1.	2005-10-15 02:49:52 +00:00
scansup.h	Tag appropriate files for rc3	2004-12-31 22:04:05 +00:00