id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
24777	Add support for statement_timeout	Jon Dufresne	nobody	"Some database servers have support for the max time a SQL statement can execute before it is aborted. In PostgreSQL this is the {{{statement_timeout}}} variable. Other database servers may have similar features available.

I'm suggesting that Django expose a database setting that allows connections to set this variable. This will allow applications to easily set limits on this resource. A bug in an application may unexpectedly produce a long running query. It is often more desirable to kill the request/query than to allow the request to continue consuming resources. A bug of this nature could lead to a DOM vulnerability in an application. Setting {{{statement_timeout}}} could help reduce the harm of such a bug.

PR to follow."	New feature	closed	Database layer (models, ORM)	dev	Normal	wontfix			Unreviewed	1	0	0	0	0	0