Tom Lane aa27977fe2 Support explicit placement of the temporary-table schema within search_path. ... This is needed to allow a security-definer function to set a truly secure value of search_path. Without it, a malicious user can use temporary objects to execute code with the privileges of the security-definer function. Even pushing the temp schema to the back of the search path is not quite good enough, because a function or operator at the back of the path might still capture control from one nearer the front due to having a more exact datatype match. Hence, disable searching the temp schema altogether for functions and operators. Security: CVE-2007-2138		2007-04-20 02:37:38 +00:00
..
FAQ	Update FAQ for 8.2.4.	2007-04-19 03:05:10 +00:00
sgml	Support explicit placement of the temporary-table schema within search_path.	2007-04-20 02:37:38 +00:00
Makefile	Don't ship spi_* man pages. (We don't do that anyway, but now it's automatic.)	2006-12-02 01:25:50 +00:00