3 ms·
Unfortunately python for Postgres is only available as an untrusted language extension, which can provide avenues for things like privilege escalation[0] We’ve
by pcnc 3y ago
Unfortunately python for Postgres is only available as an untrusted language extension, which can provide avenues for things like privilege escalation[0]
We’ve decided to only bundle trusted language extensions so that there is a balance between flexibility when it comes to users writing their own procedures, all while maintaining security.
[0] https://www.postgresql.org/docs/current/plpython.html https://www.postgresql.org/docs/current/plpython.html
- fulafel 3y agoOh, interesting. Is it related related to any inherent property of CPython? As there's also trusted Perl, Tcl, Lua etc: https://wiki.postgresql.org/wiki/PL_Matrix https://wiki.postgresql.org/wiki/PL_Matrix