Josh Berkus wrote:
> 
> However, the reason why we added the warning is that we figured out in
> 2006 that \\ escapes are a SQL injection vulnerability (this goes for
> MySQL as well).  It's possible by version 8.5 (2010) PostgreSQL will
> stop supporting them.
> 

Interesting... Can you cite some CVE reference or what have you? Google
does not seem to be my friend today.

Thanks!
_______________________________________________
DBmail mailing list
[email protected]
https://mailman.fastxs.nl/mailman/listinfo/dbmail

Reply via email to