You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tom Lane d9b023c7bc Prevent access to external files/URLs via contrib/xml2's xslt_process(). ... libxslt offers the ability to read and write both files and URLs through stylesheet commands, thus allowing unprivileged database users to both read and write data with the privileges of the database server. Disable that through proper use of libxslt's security options. Also, remove xslt_process()'s ability to fetch documents and stylesheets from external files/URLs. While this was a documented "feature", it was long regarded as a terrible idea. The fix for CVE-2012-3489 broke that capability, and rather than expend effort on trying to fix it, we're just going to summarily remove it. While the ability to write as well as read makes this security hole considerably worse than CVE-2012-3489, the problem is mitigated by the fact that xslt_process() is not available unless contrib/xml2 is installed, and the longstanding warnings about security risks from that should have discouraged prudent DBAs from installing it in security-exposed databases. Reported and fixed by Peter Eisentraut. Security: CVE-2012-3488		14 years ago
..
expected	Prevent access to external files/URLs via contrib/xml2's xslt_process().	14 years ago
sql	Prevent access to external files/URLs via contrib/xml2's xslt_process().	14 years ago
.gitignore	Add contrib/xml2/pgxml.sql to .gitignore	15 years ago
Makefile	Fix contrib/xml2 so regression test still works when it's built without libxslt.	16 years ago
pgxml.sql.in	Fix contrib/xml2 so regression test still works when it's built without libxslt.	16 years ago
uninstall_pgxml.sql	Add CVS version labels to all install/uninstall scripts.	18 years ago
xpath.c	Fix significant memory leak in contrib/xml2 functions.	15 years ago
xslt_proc.c	Prevent access to external files/URLs via contrib/xml2's xslt_process().	14 years ago