The original idea was that a trusted language does not allow an unprivileged user to gain access to any object or data, he does not have access to without that language.

This does not include data transformation functionality, like string processing or the like. As long as the user had legitimate access to the input datum, then every derived form thereof is OK.


Anyone who trades liberty for security deserves neither
liberty nor security. -- Benjamin Franklin

Sent via pgsql-hackers mailing list (
To make changes to your subscription:

Reply via email to