Tom Lane 9bc62ddd5f Add a new GUC parameter backslash_quote, which determines whether the SQL ... parser will allow "\'" to be used to represent a literal quote mark. The "\'" representation has been deprecated for some time in favor of the SQL-standard representation "''" (two single quote marks), but it has been used often enough that just disallowing it immediately won't do. Hence backslash_quote allows the settings "on", "off", and "safe_encoding", the last meaning to allow "\'" only if client_encoding is a valid server encoding. That is now the default, and the reason is that in encodings such as SJIS that allow 0x5c (ASCII backslash) to be the last byte of a multibyte character, accepting "\'" allows SQL-injection attacks as per CVE-2006-2314 (further details will be published after release). The "on" setting is available for backward compatibility, but it must not be used with clients that are exposed to untrusted input. Thanks to Akio Ishida and Yasuo Ohgaki for identifying this security issue.		2006-05-21 20:11:25 +00:00
..
backend	Add a new GUC parameter backslash_quote, which determines whether the SQL	2006-05-21 20:11:25 +00:00
bin	Add a new GUC parameter backslash_quote, which determines whether the SQL	2006-05-21 20:11:25 +00:00
corba	make sure the $Id tags are converted to $PostgreSQL as well ...	2003-11-29 22:41:33 +00:00
include	Add a new GUC parameter backslash_quote, which determines whether the SQL	2006-05-21 20:11:25 +00:00
interfaces	Change \' to '', for SQL standards compliance. Backpatch to 7.3, 7.4,	2006-05-21 19:57:40 +00:00
makefiles	Remove $(DESTDIR) from the pgxs BE_DLLLIBS= -L path for Darwin.	2006-01-19 21:20:32 +00:00
pl	Change \' to '', for SQL standards compliance. Backpatch to 7.3, 7.4,	2006-05-21 19:57:40 +00:00
port	Build server libpgport with all non-FRONTEND object files. This is to	2006-05-08 02:18:21 +00:00
template	Support Sun's compiler on SunOS4 (a/k/a Solaris 9). Per ayan@ayan.net	2004-12-29 23:47:40 +00:00
test	Add regression test to see if the min/max values of int8 convert correctly.	2005-12-05 04:14:07 +00:00
timezone	Fix pg_tzset() to ensure that 'lclmem' (the static variable holding	2006-01-10 20:16:25 +00:00
tools	Update error message and documentation for fsync test.	2005-11-16 03:44:51 +00:00
tutorial	Change \' to '', for SQL standards compliance. Backpatch to 7.3, 7.4,	2006-05-21 19:57:40 +00:00
utils	PostgreSQL extension makefile framework ("pgxs"), by Fabien Coelho, with	2004-07-30 12:26:40 +00:00
bcc32.mak	Add -N make flag to bcc builds from /src dir.	2005-05-13 18:13:16 +00:00
DEVELOPERS	just testing a script...	1999-07-30 03:45:57 +00:00
Makefile	Adjust src/tutorial Makefile so that it can use pgxs. This allows the	2005-01-13 18:23:22 +00:00
Makefile.global.in	Have libpgport link before libpq so that PG client applications are more	2005-03-25 18:18:41 +00:00
Makefile.shlib	Fix out-of-order inclusion of -L switches from LDFLAGS on AIX and HPUX.	2005-12-03 20:16:50 +00:00
nls-global.mk	More locale fixes for pg_ctl.	2004-06-01 03:32:42 +00:00
win32.mak	$Header: -> $PostgreSQL Changes ...	2003-11-29 19:52:15 +00:00