| From: | Sadeq Dousti <msdousti(at)gmail(dot)com> |
|---|---|
| To: | pgsql-www(at)postgresql(dot)org |
| Subject: | Request for WikiEditing privilege |
| Date: | 2024-11-11 08:09:57 |
| Message-ID: | CADE6Lvg6vao65b8=W4BCd4P8k6SvPaggwoCjx7rNMOPx21-edA@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-www |
Hi,
I would like editor access to the wiki, my username is *msdousti* and I
would like to modify the Count Estimate page (
https://wiki.postgresql.org/wiki/Count_estimate)
At the moment, it uses the string concatenation operator ||, which is
susceptible to SQL injection.
I'd like to mention that, starting 9.1, the FORMAT function accepts %L, and
add a query that uses %L to perform EXPLAIN (FORMAT JSON).
Best wishes,
Sadeq Dousti
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Alvaro Herrera | 2024-11-11 09:53:26 | Re: coverage.postgresql.org doesn't run injection_point tests |
| Previous Message | Peter Geoghegan | 2024-11-10 23:52:50 | coverage.postgresql.org doesn't run injection_point tests |