Re: PostgreSQL: Raku as a "trusted" language?
[email protected] (William Michels via perl6-users)
| Newsgroups | perl.perl6.users |
|---|---|
| Message-ID | <[email protected]> |
Thanks for your response, JJ. I'm wondering if the "trusted" moniker is conferred when a (specified/bespoke) language version sufficiently sanitizes input? If so, your Unicode::Security module would seem to be right on the mark: https://raku.land/zef:jjmerelo/Unicode::Security https://github.com/JJ/raku-unicode-security Best, Bill. > On Apr 17, 2024, at 12:29, JJ Merelo <[email protected]> wrote: > > From what I'm seeing, my impression is that you need to create a specific version, possibly with Pg bindings, to become either trusted or untrusted; there's no Trusted "node" (or bun, for that matter), but a "v8js" version of JavaScript. > > Any PL (procedural language) version of the language would be used to create embedded procedures. The user base for such a thing does not guarantee the effort needed to create such a version of Rakudo (which, from what I can tell, would need to be refactored at the NPQ level, since "trusted" versions can't, for instance, access the filesystem) > > El mié, 17 abr 2024 a las 21:04, William Michels via perl6-users (<[email protected] <mailto:[email protected]>>) escribió: >> Hi, >> >> Thinking about which database to use with Raku, I started following a question from StackOverflow--here: >> >> "list of PostgreSQL trusted languages?" >> https://dba.stackexchange.com/questions/156631/list-of-postgresql-trusted-languages >> >> From that page I learned that there are both "trusted" and "untrusted" modes for use of Perl with PostgreSQL: >> >> "45.5. Trusted and Untrusted PL/Perl" >> https://www.postgresql.org/docs/current/plperl-trusted.html >> >> Which led me to a matrix of programming languages and trust modes: >> >> "PL Matrix" >> https://wiki.postgresql.org/wiki/PL_Matrix >> >> On the final PL link above, Raku doesn't appear at all--so the questions arise: >> >> 1. How can the Raku community get Raku added on the "PL Matrix" page? >> >> 2. How can the Raku community get Raku accepted as a "trusted" PL for use with PostgreSQL? >> >> >> Thx, >> >> Bill. >> > > > -- > JJ