Tom Lane 3c2da80df6 Further fixes to the pg_get_expr() security fix in back branches.
It now emerges that the JDBC driver expects to be able to use pg_get_expr()
on an output of a sub-SELECT.  So extend the check logic to be able to recurse
into a sub-SELECT to see if the argument is ultimately coming from an
appropriate column.  Per report from Thomas Kellerer.
2010-09-25 16:39:44 -04:00
..
2010-09-24 13:48:37 -04:00
2005-07-30 03:07:42 +00:00
2004-06-01 03:32:42 +00:00