[#GEOT-1930] Registered functions support permits all database functions to be called

GeoTools

Registered functions support permits all database functions to be called

Created: 21/Jul/08 02:02 AM Updated: 21/Jul/08 03:18 AM

Component/s:

data complex

Affects Version/s:

2.4.5

Fix Version/s:

None

Issue Links:

Related

This issue relates to:

~~GEOT-1929~~ Support registered database functions in WFS filter queries

Description

« Hide

Implement a register of functions that GeoServer will permit users to call. At the moment, any function not recognised as implemented in GeoServer will be passed to the database. This is a gaping security hole.

All

Comments

Change History

Sort Order:

Ascending order - Click to sort in descending order

[ Permlink | « Hide ]

Ben Caradoc-Davies - 21/Jul/08 02:05 AM

This only affects "postgis-regfunc" databases.