You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+4-4
Original file line number
Diff line number
Diff line change
@@ -35,7 +35,7 @@ A MySQL-Driver for Go's [database/sql](https://golang.org/pkg/database/sql/) pac
35
35
* Supports queries larger than 16MB
36
36
* Full [`sql.RawBytes`](https://golang.org/pkg/database/sql/#RawBytes) support.
37
37
* Intelligent `LONG DATA` handling in prepared statements
38
-
* Secure `LOAD DATA LOCAL INFILE` support with file Whitelisting and `io.Reader` support
38
+
* Secure `LOAD DATA LOCAL INFILE` support with file allowlisting and `io.Reader` support
39
39
* Optional `time.Time` parsing
40
40
* Optional placeholder interpolation
41
41
@@ -122,7 +122,7 @@ Valid Values: true, false
122
122
Default: false
123
123
```
124
124
125
-
`allowAllFiles=true` disables the file Whitelist for `LOAD DATA LOCAL INFILE` and allows *all* files.
125
+
`allowAllFiles=true` disables the file allowlist for `LOAD DATA LOCAL INFILE` and allows *all* files.
126
126
[*Might be insecure!*](http://dev.mysql.com/doc/refman/5.7/en/load-data-local.html)
127
127
128
128
##### `allowCleartextPasswords`
@@ -230,7 +230,7 @@ Default: false
230
230
231
231
If `interpolateParams` is true, placeholders (`?`) in calls to `db.Query()` and `db.Exec()` are interpolated into a single query string with given parameters. This reduces the number of roundtrips, since the driver has to prepare a statement, execute it with given parameters and close the statement again with `interpolateParams=false`.
232
232
233
-
*This can not be used together with the multibyte encodings BIG5, CP932, GB2312, GBK or SJIS. These are blacklisted as they may [introduce a SQL injection vulnerability](http://stackoverflow.com/a/12118602/3430118)!*
233
+
*This can not be used together with the multibyte encodings BIG5, CP932, GB2312, GBK or SJIS. These are rejected as they may [introduce a SQL injection vulnerability](http://stackoverflow.com/a/12118602/3430118)!*
234
234
235
235
##### `loc`
236
236
@@ -445,7 +445,7 @@ For this feature you need direct access to the package. Therefore you must chang
445
445
import"github.com/go-sql-driver/mysql"
446
446
```
447
447
448
-
Files must be whitelisted by registering them with `mysql.RegisterLocalFile(filepath)` (recommended) or the Whitelist check must be deactivated by using the DSN parameter `allowAllFiles=true` ([*Might be insecure!*](http://dev.mysql.com/doc/refman/5.7/en/load-data-local.html)).
448
+
Files must be explicitly allowed by registering them with `mysql.RegisterLocalFile(filepath)` (recommended) or the allowlist check must be deactivated by using the DSN parameter `allowAllFiles=true` ([*Might be insecure!*](http://dev.mysql.com/doc/refman/5.7/en/load-data-local.html)).
449
449
450
450
To use a `io.Reader` a handler function must be registered with `mysql.RegisterReaderHandler(name, handler)` which returns a `io.Reader` or `io.ReadCloser`. The Reader is available with the filepath `Reader::<name>` then. Choose different names for different handlers and `DeregisterReaderHandler` when you don't need it anymore.
0 commit comments