"Oliver Elphick" <olly@lfix.co.uk> writes:
> Tom Lane wrote:
>>>> Hmm. I can see how a linefeed in a password would create a problem (it
>>>> breaks the line-oriented formatting of the pg_pwd file).
> ...
>>>> In any case it seems like it'd be a good idea to forbid nonprinting
>>>> characters in passwords. Comments anyone?
> That sounds too restrictive; allowing non-printing characters should
> improve password security. Why not simply exclude linefeed and
> carriage return?
Actually it seems that linefeed and tab are the minimum set of
characters that must be excluded to avoid breaking pg_pwd.
Working on it now ...
regards, tom lane
