-
Notifications
You must be signed in to change notification settings - Fork 22
Parsing library should not whitelist keys #8
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
I think you are confused what this library is doing. It turns a string into an object usable by node-postgres. I don't see how you would "pass through a configuration string". |
Sorry - as an example, the Go As it's currently implemented, I believe all of these values would be stripped from the connection string by this library |
(there are also changes to node-postgres that would need to get made to make this happen, but I'm trying to figure out the least invasive way to make this change) |
Relevant pg issue: brianc/node-postgres#1095
Yep, except it drops relevant bits from connection string, like non-whitelisted query string params. So, for example, there is no way to specify time zone (and there is already a bunch of similar issues: #9, #3 with more to come surely). |
Should be resolved by #7 |
A Postgres connection can take a number of different configuration arguments: http://www.postgresql.org/docs/9.4/static/libpq-connect.html
Only a handful are parsed and returned by this library; all additional configuration parameters are filtered.
The library should assume that the user knows the configuration string they are trying to pass, and pass through that configuration string.
The text was updated successfully, but these errors were encountered: