codekingpro/portable-devtools

1/*-------------------------------------------------------------------------2 *3 * Interfaces in support of FE/BE connections.4 *5 *6 * Portions Copyright (c) 1996-2023, PostgreSQL Global Development Group7 * Portions Copyright (c) 1994, Regents of the University of California8 *9 * src/include/common/connect.h10 *11 *-------------------------------------------------------------------------12 */13#ifndef CONNECT_H14#define CONNECT_H15 16/*17 * This SQL statement installs an always-secure search path, so malicious18 * users can't take control.  CREATE of an unqualified name will fail, because19 * this selects no creation schema.  This does not demote pg_temp, so it is20 * suitable where we control the entire FE/BE connection but not suitable in21 * SECURITY DEFINER functions.  This is portable to PostgreSQL 7.3, which22 * introduced schemas.  When connected to an older version from code that23 * might work with the old server, skip this.24 */25#define ALWAYS_SECURE_SEARCH_PATH_SQL \26	"SELECT pg_catalog.set_config('search_path', '', false);"27 28#endif							/* CONNECT_H */29