Re: Restricting Postgres - Mailing list pgsql-performance

From Bruno Wolff III
Subject Re: Restricting Postgres
Date
Msg-id 20041105051646.GA22486@wolff.to
Whole thread Raw
In response to Re: Restricting Postgres  (Matt Clark <matt@ymogen.net>)
List pgsql-performance
On Thu, Nov 04, 2004 at 23:32:57 +0000,
  Matt Clark <matt@ymogen.net> wrote:
> >
> >    I think in the future there will be a good bit of presentation
> >login in  the client...
>
> Not if Bruno has his way ;-)

Sure there will, but it will be controlled by the client, perhaps taking
suggestions from the style sheet pointed to by the document.

Running foreign code from random or even semi-random places is a recipe
for becoming a spam server. See examples from Microsoft such as their
spreadsheet and office software. Documents really need to be passive
data, not active code.

If the client and the server have a special trust relationship, then
running code supplied by the server makes sense. So you might use javascript
within a business where the IT department runs the server and the employees
run clients. However, encouraging people to browse the internet with
javascript enabled is a bad idea.

pgsql-performance by date:

Previous
From: Neil Conway
Date:
Subject: Re: Anything to be gained from a 'Postgres Filesystem'?
Next
From: Antony Paul
Date:
Subject: Checking = with timestamp field is slow