Re: can we mark upper/lower/textlike functions leakproof? - Mailing list pgsql-hackers

From Jacob Champion
Subject Re: can we mark upper/lower/textlike functions leakproof?
Date
Msg-id CAOYmi+kq95mTCLmQK1-0bPpuKoGF67RFjqdUhCn=i2NFFi-0Yw@mail.gmail.com
Whole thread Raw
In response to Re: can we mark upper/lower/textlike functions leakproof?  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: can we mark upper/lower/textlike functions leakproof?
List pgsql-hackers
On Wed, Jul 31, 2024 at 1:26 PM Robert Haas <robertmhaas@gmail.com> wrote:
> However, the risk is that an end-user is going to be much less able to
> evaluate what is and isn't safe than we are. I think some people are
> going to be like -- well the core project doesn't mark enough stuff
> leakproof, so I'll just go add markings to a bunch of stuff myself.
> And they probably won't stop at stuff like UPPER which is almost
> leakproof. They might add it to stuff such as LIKE which results in
> immediately giving away the farm. By not giving people any guidance,
> we invite them to make up their own rules.

+1.

Would it provide enough value for effort to explicitly mark leaky
procedures as such? Maybe that could shrink the grey area enough to be
protective?

--Jacob



pgsql-hackers by date:

Previous
From: Jeff Davis
Date:
Subject: Re: Inconsistency with EXPLAIN ANALYZE CREATE MATERIALIZED VIEW
Next
From: Jacob Champion
Date:
Subject: Re: can we mark upper/lower/textlike functions leakproof?