Skip to content

v0.22.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Jun 15:43
· 38 commits to main since this release
v0.22.2
a906ab5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

  • #237 93a78de Thanks @Mandrak147! - fix(no-set-search-path): do not flag the search_path pin on function definitions

    A SET search_path = ... clause attached to a CREATE FUNCTION / CREATE PROCEDURE / ALTER FUNCTION is the documented mitigation for search_path injection and is required by no-security-definer-without-search-path. Flagging it made the two recommended rules mutually unsatisfiable for SECURITY DEFINER functions (no value of search_path, not even '', could satisfy both). The rule now reports only standalone SET search_path statements.

Assets 2
Loading