Tags: yandex/odyssey
Tags
introduce smart_search_path_enquoting (#1195) With this options enabled, Odyssey will pass search_path without enquoting: $ PGOPTIONS='--search_path=public,\ "$user",\ another' ./psql <...> search_path -------------------------- public, "$user", another (1 row) This work only if the value does not contains symbols that allows to create SQL injection. Btw, even if the injection is possible, the search_path value is deployed after the authentication, which means that the hacker already have an ability to execute queries. Signed-off-by: roman khapov <r.khapov@ya.ru>
remove jemalloc workflow it does test jemalloc, not odyssey Signed-off-by: roman khapov <r.khapov@ya.ru>
fixes for debian according to lintian (#1171) Signed-off-by: roman khapov <r.khapov@ya.ru>
build(deps): bump actions/checkout from 5 to 6 (#1070) Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
PreviousNext