v1.1.1
stableValidates database names before backup and removes temporary SSL keys when a connector fails to start.
Security
- Database names are validated before they are passed to
pg_dump. A backup aborts when the server returns a name that could be read as a connection string, which could otherwise redirect the backup connection and its credentials to another host. - The temporary copy of the client SSL key written from
ssl_key_datais removed when a connector fails to start because of an invalid configuration.