diff pkg/models/intservices.go @ 1288:9f7dc950ffd2

Accept only well-formed XML documents as style in database
author Tom Gottfried <tom@intevation.de>
date Thu, 22 Nov 2018 12:25:01 +0100
parents a244b18cb916
children cabf4789e02b
line wrap: on
line diff
--- a/pkg/models/intservices.go	Thu Nov 22 11:48:54 2018 +0100
+++ b/pkg/models/intservices.go	Thu Nov 22 12:25:01 2018 +0100
@@ -44,14 +44,14 @@
 JOIN pg_class ON name = oid ORDER by relname`
 
 	selectStyleSQL = `
-SELECT style
+SELECT XMLSERIALIZE(DOCUMENT style AS text)
 FROM sys_admin.published_services
 JOIN pg_class ON name = oid
 WHERE relname = $1`
 
 	updateStyleSQL = `
 UPDATE sys_admin.published_services
-SET style = $1::bytea
+SET style = XMLPARSE(DOCUMENT $1)
 WHERE name IN (SELECT oid FROM pg_class WHERE relname = $2)`
 )