klinsmaya/SQLBot
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git synced 2026-11-08 01:06:59 +08:00
Code Issues Packages Projects Releases Wiki Activity

revert: Code security optimization

Browse Source
This commit is contained in:
junjun
2025-12-29 15:34:08 +08:00
committed by Junjun
parent 7efa0a9cff
commit ef8fd8f711
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/apps/db/db.py
+2 -4
View File
@@ -386,8 +386,7 @@ def get_tables(ds: CoreDatasource):
password=conf.password,
options=f"-c statement_timeout={conf.timeout * 1000}",
**extra_config_dict) as conn, conn.cursor() as cursor:
# Use parameterized query for security
cursor.execute(sql, (sql_param,))
cursor.execute(sql.format(sql_param))
res = cursor.fetchall()
res_list = [TableSchema(*item) for item in res]
return res_list
@@ -438,8 +437,7 @@ def get_fields(ds: CoreDatasource, table_name: str = None):
password=conf.password,
options=f"-c statement_timeout={conf.timeout * 1000}",
**extra_config_dict) as conn, conn.cursor() as cursor:
# Use parameterized query for security
cursor.execute(sql, (p1, p2))
cursor.execute(sql.format(p1, p2))
res = cursor.fetchall()
res_list = [ColumnSchema(*item) for item in res]
return res_list