Re:Select Code_execution from * Using SQLite; (2019)
by ufo on Saturday June 13, 2020 @04:28PM
(#23512412)
In the context of the recent discussion[1] about using an SQLite database as an application file format, is there a way to mitigate these problems?
For example, a way to verify that the SQLite database has the exact schema that you expect and doesn't have weird views configured to hijack your normal queries?
For example, a way to verify that the SQLite database has the exact schema that you expect and doesn't have weird views configured to hijack your normal queries?
[1] https://news.ycombinator.com/item?id=23508923