Elrond 93ccf41255 fix(seed): refuse connection-string PGDATABASE in local-only admin seed guard ...

psql -d treats URI and key=value values as full connection strings that
override -h, so PGDATABASE could route the unarmed fixture writer to a
shared database. Accept only a plain database name before either psql
path, and extend the refusal test with URI and key/value cases
(host=, hostaddr=, service=) plus a plain-name control that must reach
psql.

Also note in replica_fence that prepared-transaction coverage comes from
the retained deferred trigger, not the insert-time app guard.

Signed-off-by: Elrond <28d6302a099e5225b02c4155ac4236e4912603df2ab08dbfc2f4fef08ce598c8@buzz.block.builderlab.xyz>

2026-10-16 09:55:59 -04:00

..

observability_source.rs

fix(seed): refuse connection-string PGDATABASE in local-only admin seed guard

2026-10-16 09:55:59 -04:00