Re: Trusted versus untrusted Pl language

Поиск
Список
Период
Сортировка
От Bruce Momjian
Тема Re: Trusted versus untrusted Pl language
Дата
Msg-id 20201224004922.GB13055@momjian.us
обсуждение исходный текст
Ответ на Re: Trusted versus untrusted Pl language  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: Trusted versus untrusted Pl language  (Steven Pousty <steve.pousty@gmail.com>)
Список pgsql-docs
On Wed, Dec 23, 2020 at 07:38:16PM -0500, Tom Lane wrote:
> Steven Pousty <steve.pousty@gmail.com> writes:
> > 3. An example of how to make a pre-installed untrusted langue into a
> > trusted language
> 
> Under what circumstances would that be a good idea?
> 
> I can't imagine that we'd really want to recommend end users doing
> that, but an example would surely be taken as a recommendation
> that it's okay to do it.

Right. The language has to provide some sandbox environment for us to
consider it safe, e.g. Perl, but not Python.  PL/pgSQL is safe since it
doesn't have any interface to external resources.

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EnterpriseDB                             https://enterprisedb.com

  The usefulness of a cup is in its emptiness, Bruce Lee




В списке pgsql-docs по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Trusted versus untrusted Pl language
Следующее
От: Steven Pousty
Дата:
Сообщение: Re: Trusted versus untrusted Pl language