postgresql: SQL injection [LWN.net]

postgresql: SQL injection

Posted Jun 1, 2006 13:03 UTC (Thu) by kingdon (subscriber, #4526)
Parent article: postgresql: SQL injection

The http://www.postgresql.org/docs/techdocs.50
article consistently refers to 0xA0-0xFF when they mean
0x80-0xBF (the valid values for a non-initial octet of a
UTF-8 character). See RFC3629 (which also has general
good advice about how to handle UTF-8 and subtle security
problems which can happen).

Anyone know how to tell them? It wasn't immediately apparent.

(Log in to post comments)