Skip to content

pg_squeeze 1.9.4

Latest

Choose a tag to compare

@df7cb df7cb released this 29 Jul 15:47
REL1_9_4
400c5f6

Properly quote schema and table names (#93, @CyberDem0n)

Replace manual double-quote and single-quote string concatenation with
quote_identifier()/quote_ident() and quote_literal_cstr() when building
dynamic SQL for ANALYZE statements and log/error inserts.

Since `squeeze.worker_role` is supposed to be a superuser, lack of
proper quoting allows executing arbitrary SQL with superuser privileges.