fit2cloud-chenyw
49a50e3bce
fix: Cross-Workspace Assistant Modification and Deletion (IDOR)
2026-08-28 15:37:45 +08:00
fit2cloud-chenyw
a70eb1b308
fix: Embedded security vulnerabilities
2026-07-14 15:31:42 +08:00
ulleo
2fc646ce3c
feat: Adjust the organizational attribution logic of dialogues in MCP
...
#1221
2026-06-29 16:00:42 +08:00
junjun
936bb5d390
fix: Compatible with older versions of MSSQL in DataEase
2026-06-23 14:57:10 +08:00
ulleo
5b94406c3a
fix: Fix SQL injection / LLM Prompt Injection vulnerability causing unauthorized queries
...
Security hardening:
- Add SQLBOT_ALLOW_METADATA_QUERIES config option, disable SHOW/DESCRIBE/EXPLAIN by default
- Add table whitelist check, use sqlglot to parse actual SQL table names and compare with authorized table list
- Add dangerous function check, block LOAD_FILE, INTO OUTFILE, EXEC etc. by database type
- Improve check_sql_read to return specific error reasons for better debugging
2026-06-11 17:29:38 +08:00
junjun
7637ab391d
fix: Fix the privilege escalation vulnerability in system variables
2026-06-08 17:01:44 +08:00
junjun
ba7b397c51
fix: Fix the privilege escalation vulnerability in system variables
2026-06-08 16:54:17 +08:00
ulleo
d5d5e87b51
feat(Application): Application can configure specified model
2026-06-04 15:06:09 +08:00
ulleo
835eefcb39
fix: remove svg image support in upload files
2026-06-03 15:55:05 +08:00
ulleo
ba16432a66
feat(Application): Application can configure specified model
2026-06-02 14:05:52 +08:00
ulleo
e72c0bedda
fix: Fix the data source-related issues in the PR
2026-05-11 15:07:15 +08:00
fit2cloud-chenyw
5c136b46c5
perf: Optimize Embedded Assistant Cache Settings
2026-03-17 14:38:42 +08:00
fit2cloud-chenyw
6d63dcefc5
fix: Clickjacking Attack
2026-03-16 15:44:57 +08:00
junjun
a357dd01a4
feat: support system variable
2026-03-16 14:23:53 +08:00
junjun
5963561933
refactor: system variable sort by name
2026-03-16 10:01:58 +08:00
junjun
beeddb64c6
refactor: system variable sort by create time
2026-03-13 17:24:13 +08:00
junjun
d9129073b9
feat: support system variable
2026-02-05 10:15:46 +08:00
junjun
cb633cb32a
fix: assistant support oracle connection mode
2026-02-04 10:58:40 +08:00
fit2cloud-chenyw
b9ce9d3ddf
perf: Optimize DataEase integration with Advanced Assistant
2026-01-24 17:44:37 +08:00
ulleo
0dc289956b
feat: improve chart field name matching with original table structure
2026-01-22 14:30:58 +08:00
fit2cloud-chenyw
32c95f080a
perf: Log Optimization for Advanced Applications Calling Remote Data Source APIs
2026-01-20 16:25:00 +08:00
junjun
74e0e3a93d
fix(assistant): After the assistant is embedded in DataEase, the query times out.
2026-01-15 14:08:53 +08:00
fit2cloud-chenyw
e54a5fe46f
perf: Place the assistant menu in the workspace
2026-01-09 17:40:42 +08:00
fit2cloud-chenyw
77f2b4d7c7
Pr@main@feat user batch import ( #694 )
...
* feat: User Batch Import
* perf: Disable user import option
2025-12-26 17:55:36 +08:00
王嘉豪
5c88ff8054
refactor: Add logs to the system operation method ( #692 )
2025-12-26 11:49:25 +08:00
fit2cloud-chenyw
2cf44ac364
perf: Embedded Application Deletion Error
2025-12-23 19:47:22 +08:00
fit2cloud-chenyw
1190bc3954
perf: Optimizing API Key Authentication
2025-12-23 16:18:57 +08:00
fit2cloud-chenyw
966af42e81
feat(X-Pack): Supports third-party platforms as the default login method
2025-12-11 09:08:52 +08:00
fit2cloud-chenyw
e47e0e8ab8
feat: Add parameter configuration functionality
2025-12-09 15:04:12 +08:00
junjun
d92c377e59
refactor: assistant support all sqlbot datasource
2025-12-04 17:35:01 +08:00
王嘉豪
661b007dab
refactor: update assistant i18n info ( #580 )
2025-12-04 14:25:31 +08:00
fit2cloud-chenyw
e38deff7fb
perf: Optimize the logic for deleting third-party platform users
2025-12-03 17:12:24 +08:00
王嘉豪
b451d1f057
fix: package error ( #549 )
2025-12-02 17:53:55 +08:00
王嘉豪
3c948d7a4d
fix: Optimize the internationalization prompt of the assistant ( #546 )
2025-12-02 16:13:43 +08:00
fit2cloud-chenyw
aa0b31991e
perf: API Optimization for Multi-Domain Validation in Embedded Advanced Assistants
2025-12-02 11:37:56 +08:00
junjun
1fb1ae6f8e
refactor: assistant support all sqlbot datasource #467
2025-11-28 10:18:35 +08:00
junjun
3a12e4d700
refactor: assistant support all sqlbot datasource #467
2025-11-27 17:41:02 +08:00
junjun
d916e2911f
refactor: assistant support all sqlbot datasource #467
2025-11-27 11:44:46 +08:00
junjun
d1f5fd9e44
refactor: assistant support all sqlbot datasource
2025-11-27 11:22:08 +08:00
fit2cloud-chenyw
0e418d2ee8
perf: Optimize embedded compatibility for multi-domain verification
2025-11-26 13:29:26 +08:00
fit2cloud-chenyw
c7693fc880
perf: Multiple Domain Validation for Embedded Systems #388
2025-11-25 21:43:21 +08:00
fit2cloud-chenyw
460e7f605c
perf: User and Workspace Sorting Optimization
2025-11-06 16:48:57 +08:00
fit2cloud-chenyw
caa38bfb20
fix: Advanced Assistant: Dynamic Data Source with Case-Insensitive Type Handling
2025-10-22 12:27:08 +08:00
junjun
f4682b3fe1
feat: Vector retrieval matches tables
2025-10-13 14:48:22 +08:00
junjun
2ebac00f87
feat: Vector retrieval matches tables
2025-10-10 16:37:15 +08:00
fit2cloud-chenyw
d5d827da76
perf: Conceal Azure OpenAI-type large language models
2025-10-10 10:43:14 +08:00
junjun
c5466459e9
feat: Vector retrieval matches tables
2025-10-09 10:05:10 +08:00
fit2cloud-chenyw
ae63a92734
perf: Embedded page interactive
2025-09-18 14:32:01 +08:00
fit2cloud-chenyw
db8fc429fe
fix: The schema field was missed in the Assistant's AES encryption process
2025-09-10 18:21:53 +08:00
fit2cloud-chenyw
cd3054ed38
perf: The advanced assistant application does not enable AES encryption by default
2025-09-03 18:57:56 +08:00
fit2cloud-chenyw