Re: Add GUC to enable libxml2's XML_PARSE_HUGE

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Add GUC to enable libxml2's XML_PARSE_HUGE
Дата
Msg-id 1118289.1755704771@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Add GUC to enable libxml2's XML_PARSE_HUGE  (Jim Jones <jim.jones@uni-muenster.de>)
Ответы Re: Add GUC to enable libxml2's XML_PARSE_HUGE
Re: Add GUC to enable libxml2's XML_PARSE_HUGE
Список pgsql-hackers
Jim Jones <jim.jones@uni-muenster.de> writes:
> To address this, Erik and I would like to propose a new GUC,
> xml_parse_huge, which controls libxml2’s XML_PARSE_HUGE option.

Given the spotty security history of libxml2, I can't really see
how this wouldn't be enormously unsafe.  Even as a superuser-only
option, it seems like a bad idea.

Independently of that, we have learned the hard way that GUCs
that change application-visible query semantics are a bad idea.
You cannot really argue that this wouldn't be one.

            regards, tom lane



В списке pgsql-hackers по дате отправления: