Doug McNaught <doug@mcnaught.org> writes:
> What about making network connections? That seems less harmful than
> filesystem access, and certainly could have legitimate uses.
Any outside-the-database operation "could have legitimate uses". The
problem is it also has not-so-legitimate uses, and we would have no
good way to tell the difference. So a trusted language is supposed to
be an airtight sandbox. If you want out of the sandbox, you use an
untrusted language.
regards, tom lane