Re: Tightening up allowed custom GUC names - Mailing list pgsql-hackers

From Andrew Dunstan
Subject Re: Tightening up allowed custom GUC names
Date
Msg-id b7ef059e-4897-d2c2-62cb-7c5ebdc40f3e@dunslane.net
Whole thread Raw
In response to Re: Tightening up allowed custom GUC names  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
On 2/11/21 1:32 PM, Tom Lane wrote:
> Noah Misch <noah@leadboat.com> writes:
>> On Tue, Feb 09, 2021 at 05:34:37PM -0500, Tom Lane wrote:
>>> * A case could be made for tightening things up a lot more, and not
>>> allowing anything that doesn't look like an identifier.  I'm not
>>> pushing for that, as it seems more likely to break existing
>>> applications than the narrow restriction proposed here.  But I could
>>> live with it if people prefer that way.
>> I'd prefer that.  Characters like backslash, space, and double quote have
>> significant potential to reveal bugs, while having negligible application
>> beyond revealing bugs.
> Any other opinions here?  I'm hesitant to make such a change on the
> basis of just one vote.
>
>             



That might be a bit restrictive. I could at least see allowing '-' as
reasonable, and maybe ':'. Not sure about other punctuation characters.
OTOH I'd be surprised if the identifier restriction would burden a large
number of people.


cheers


andrew


--
Andrew Dunstan
EDB: https://www.enterprisedb.com




pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: Tightening up allowed custom GUC names
Next
From: Tom Lane
Date:
Subject: Re: parse mistake in ecpg connect string