Re: Restricting Postgres

Поиск
Список
Период
Сортировка
От Bruno Wolff III
Тема Re: Restricting Postgres
Дата
Msg-id 20041105051646.GA22486@wolff.to
обсуждение исходный текст
Ответ на Re: Restricting Postgres  (Matt Clark <matt@ymogen.net>)
Список pgsql-performance
On Thu, Nov 04, 2004 at 23:32:57 +0000,
  Matt Clark <matt@ymogen.net> wrote:
> >
> >    I think in the future there will be a good bit of presentation
> >login in  the client...
>
> Not if Bruno has his way ;-)

Sure there will, but it will be controlled by the client, perhaps taking
suggestions from the style sheet pointed to by the document.

Running foreign code from random or even semi-random places is a recipe
for becoming a spam server. See examples from Microsoft such as their
spreadsheet and office software. Documents really need to be passive
data, not active code.

If the client and the server have a special trust relationship, then
running code supplied by the server makes sense. So you might use javascript
within a business where the IT department runs the server and the employees
run clients. However, encouraging people to browse the internet with
javascript enabled is a bad idea.

В списке pgsql-performance по дате отправления:

Предыдущее
От: Neil Conway
Дата:
Сообщение: Re: Anything to be gained from a 'Postgres Filesystem'?
Следующее
От: Antony Paul
Дата:
Сообщение: Checking = with timestamp field is slow