Skip to content

v0.9.15

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Jul 11:21
v0.9.15
0ab8e05
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Security

  • Improve SQL parameter binding and escaping by @kvch in #965
    • WAL identifier quoting now validates a single complete quoted token instead of trusting leading/trailing ", so a crafted source object name can't break out onto the target.
    • Replication slot CREATE/DROP bind the slot name as a parameter.
    • START_REPLICATION escapes table-filter plugin options and validates the slot name before use.

Contributors

kvch
Assets 8
Loading