čt 7. 1. 2021 v 15:50 odesílatel David G. Johnston <
david.g.johns...@gmail.com> napsal:
> On Thursday, January 7, 2021, Pavel Stehule
> wrote:
>
>>
>>
>> The vulnerability is almost the same although it is a little bit harder
>> to create attack strings.
>>
>
> Would making the function run as
On Thursday, January 7, 2021, Pavel Stehule wrote:
>
>
> The vulnerability is almost the same although it is a little bit harder to
> create attack strings.
>
Would making the function run as “security definer” and setting up a
minimal permissions user/owner help with mitigation?
David J.
čt 7. 1. 2021 v 12:13 odesílatel Durumdara napsal:
> Dear Members!
>
>
>
> Pavel Stehule ezt írta (időpont: 2021. jan. 6.,
> Sze, 12:03):
>
>>
>>
>>
>> it cannot work, because \ will be replaced by \\
>>
>> postgres=# CREATE OR REPLACE FUNCTION public.unistr(text)
>> RETURNS text
>>
Dear Members!
Pavel Stehule ezt írta (időpont: 2021. jan. 6.,
Sze, 12:03):
>
>
>
> it cannot work, because \ will be replaced by \\
>
> postgres=# CREATE OR REPLACE FUNCTION public.unistr(text)
> RETURNS text
> LANGUAGE plpgsql
> IMMUTABLE STRICT
> AS $function$
> declare r text;
> begin
st 6. 1. 2021 v 10:54 odesílatel Gavan Schneider
napsal:
> On 6 Jan 2021, at 19:43, Pavel Stehule wrote:
>
> Currently there are not any functions that you need. You need to write
> your
> own.
>
> CREATE OR REPLACE FUNCTION public.unistr(text)
> RETURNS text
> LANGUAGE plpgsql
> IMMUTABLE
On 6 Jan 2021, at 19:43, Pavel Stehule wrote:
Currently there are not any functions that you need. You need to write
your
own.
CREATE OR REPLACE FUNCTION public.unistr(text)
RETURNS text
LANGUAGE plpgsql
IMMUTABLE STRICT
AS $function$
Hi
st 6. 1. 2021 v 8:55 odesílatel Durumdara napsal:
> Dear Members!
>
> A web developer stores JSON like strings in a text column.
>
> With E prefix we can get the real text:
>
> Select E'Az ad\u00f3kulcsonk\u00e9nti'
>
> Hungarian: "Az adókulcsonkénti" (ISO-8859-2)
>
> How to get the same
Dear Members!
A web developer stores JSON like strings in a text column.
With E prefix we can get the real text:
Select E'Az ad\u00f3kulcsonk\u00e9nti'
Hungarian: "Az adókulcsonkénti" (ISO-8859-2)
How to get the same result from a table column?
select WhatAFunction(
