Functions without a fixed search_path are vulnerable to search path injection attacks.
Why This Matters
An attacker can create objects in a schema that appears earlier in the search_path, hijacking function behavior.
Tags
plpgsql_checkSplinterpostgresql
Related Rules
Catch this automatically on every PR
BeforeMerge scans your pull requests against this rule and 3+ others. Get actionable feedback before code ships.