Test ID:	1.3.6.1.4.1.25623.1.0.150444
Category:	Policy
Title:	GaussDB Kernel: Configuring the Backslash Quote Usage
Summary:	backslash_quote specifies whether a single quotation mark (') in a string can be;replaced by a backslash quote (\'). The backslash-quote (\') is accepted in;PostgreSQL due to historical reasons. However, this may bring security risks, such;as SQL injection attacks. To prevent such risks, you are advised to set;backslash_quote to deny queries containing the backslash-quote. In addition, you;are advised to use SQL standard method in which a single quotation mark (') is;Repeated ('').
Description:	Summary: backslash_quote specifies whether a single quotation mark (') in a string can be replaced by a backslash quote (\'). The backslash-quote (\') is accepted in PostgreSQL due to historical reasons. However, this may bring security risks, such as SQL injection attacks. To prevent such risks, you are advised to set backslash_quote to deny queries containing the backslash-quote. In addition, you are advised to use SQL standard method in which a single quotation mark (') is Repeated (''). CVSS Score: 0.0 CVSS Vector: AV:L/AC:H/Au:S/C:N/I:N/A:N
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.