Add crosstab to blocklist, since they take arbitrary SQL as args

pganalyze · Jan 7, 2025 · 618f79b · 618f79b
1 parent f37543e
commit 618f79b
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/input/postgres/explain_analyze.go b/input/postgres/explain_analyze.go
@@ -91,6 +91,10 @@ var blockedFunctions = []string{
 	"dblink_connect",
 	"dblink_exec",
 	// Blocked because these functions allow executing arbitrary SQL as input (which can workaround other checks)
+	"crosstab",
+	"crosstab2",
+	"crosstab3",
+	"crosstab4",
 	"xpath_table",
 }