Skip to content
Snippets Groups Projects
  • Tom Lane's avatar
    3bf822c4
    Disable the undocumented xmlvalidate() function, which was unintentionally · 3bf822c4
    Tom Lane authored
    left in the code though it was not meant to be provided.  It represents a
    security hole because unprivileged users could use it to look at (at least the
    first line of) any file readable by the backend.  Fortunately, this is only
    possible if the backend was built with XML support, so the damage is at least
    mitigated; and 8.3 probably hasn't propagated into any security-critical uses
    yet anyway.  Per report from Sergey Burladyan.
    3bf822c4
    History
    Disable the undocumented xmlvalidate() function, which was unintentionally
    Tom Lane authored
    left in the code though it was not meant to be provided.  It represents a
    security hole because unprivileged users could use it to look at (at least the
    first line of) any file readable by the backend.  Fortunately, this is only
    possible if the backend was built with XML support, so the damage is at least
    mitigated; and 8.3 probably hasn't propagated into any security-critical uses
    yet anyway.  Per report from Sergey Burladyan.