From 5eb4185afcf6dcd7ec13fbe45d9b046e975e3889 Mon Sep 17 00:00:00 2001 From: Daniele Varrazzo Date: Thu, 25 Jan 2018 21:58:05 +0000 Subject: [PATCH] Dropped warning about unsafe cursor names It was long made secure --- doc/src/connection.rst | 5 ----- 1 file changed, 5 deletions(-) diff --git a/doc/src/connection.rst b/doc/src/connection.rst index 454f80d7..50c3d469 100644 --- a/doc/src/connection.rst +++ b/doc/src/connection.rst @@ -41,11 +41,6 @@ The ``connection`` class previously only valid PostgreSQL identifiers were accepted as cursor name. - .. warning:: - It is unsafe to expose the *name* to an untrusted source, for - instance you shouldn't allow *name* to be read from a HTML form. - Consider it as part of the query, not as a query parameter. - The *cursor_factory* argument can be used to create non-standard cursors. The class returned must be a subclass of `psycopg2.extensions.cursor`. See :ref:`subclassing-cursor` for