jackieya
2772cde16e
security: fix RCE via terminology poisoning and restrict upload access
2026-03-16 10:37:37 +08:00
junjun
5963561933
refactor: system variable sort by name
2026-03-16 10:01:58 +08:00
junjun
bb30a3a545
fix: Fix SSRF causing arbitrary file read vulnerability
2026-03-13 18:21:24 +08:00
junjun
beeddb64c6
refactor: system variable sort by create time
2026-03-13 17:24:13 +08:00
dataeaseShu
bd7ce4764c
fix: Packaging error
2026-03-13 17:11:51 +08:00
dataeaseShu
4eebad8a9c
fix(System Variables): After deleting a system variable, its position in row permissions will change to a number.
2026-03-13 15:49:04 +08:00
dataeaseShu
30031e95c9
fix(system variables): Both data sources and system variables now include icons displaying field types.
2026-03-13 14:17:26 +08:00
junjun
15c75365ae
refactor: The data table supports enabling and disabling
2026-03-13 14:06:25 +08:00
dataeaseShu
b25470ac14
fix(User Management): Deleting configured system parameters caused the "Add System Parameter" button to disappear from the user editing page.
2026-03-12 17:33:19 +08:00
dataeaseShu
8a7ad4450a
fix(System Variables): Edit system variables - Add variable values - Close the editing window - Variable values are saved.
2026-03-12 15:47:14 +08:00
wangjiahao
6e8898c1c1
refactor(datasource): Recommendation question style adjustment
2026-03-12 14:44:37 +08:00
anch0r00
94ca094467
style: fix import order for psycopg2
2026-03-11 15:44:55 +08:00
anch0r00
39f2203cec
fix: prevent SQL injection in uploadExcel via psycopg2.sql.Identifier
2026-03-11 15:44:55 +08:00
junjun
ff98514827
fix: Fix SSRF causing arbitrary file read vulnerability
2026-03-10 10:48:33 +08:00
ulleo
79f78303fe
feat: add chat log step detail
2026-03-09 14:31:51 +08:00
ulleo
0ff44b4d94
fix: fix log persistence issues with concurrent question requests
...
#940
2026-03-04 18:04:18 +08:00
ulleo
ff60e1f8c9
feat: improve long text display in table chart
...
#776
2026-03-02 15:17:38 +08:00
junjun
973aa9b3ab
refactor: Optimize data source timeout text
2026-03-02 14:25:41 +08:00
Langel
0dd6536bf8
fix: add missing comma in whitelist.py causing /mcp* routes to be unwhitelisted
...
"*.css.map" was missing a trailing comma, causing Python's implicit string
literal concatenation to merge it with the next entry into "*.css.map/mcp*".
This made the /mcp* whitelist rule never match, so all /mcp/* endpoints
(mcp_start, mcp_question, mcp_get_sql, mcp_execute_sql, etc.) were blocked
by TokenMiddleware with "Miss Token[X-SQLBOT-TOKEN]" even though they are
intended to handle their own authentication internally.
2026-03-02 11:08:43 +08:00
ulleo
d6f4e6b43f
pref: improve Table sort
2026-02-28 18:24:02 +08:00
wangjiahao
82de276aad
feat(dashboard): The dashboard supports displaying real-time data
2026-02-28 16:02:08 +08:00
王嘉豪
9dccaf12d1
feat(dashboard): The dashboard supports displaying real-time data ( #930 )
2026-02-28 14:53:51 +08:00
dataeaseShu
d12cb83c06
fix(Data source): The table join function occasionally freezes the entire table join interface #917
2026-02-24 13:53:25 +08:00
ulleo
2f5736686f
feat: add chat log step detail
2026-02-12 17:51:02 +08:00
dataeaseShu
40925e9649
feat(Data source): Execution Details
2026-02-11 10:57:23 +08:00
dataeaseShu
06d81a6fbb
fix: Style optimization
2026-02-11 09:50:35 +08:00
junjun
28ff1c9a0b
fix: Fix the issue of incorrect data source connection pool recycling
2026-02-10 17:01:24 +08:00
fit2cloud-chenyw
95a7daebef
perf: Optimize API documentation authentication prompts
2026-02-09 16:58:07 +08:00
fit2cloud-chenyw
6176eee385
perf: typos error
2026-02-09 16:47:40 +08:00
fit2cloud-chenyw
5208b59800
fix: Authentication is required to access the API documentation #839
2026-02-09 16:47:40 +08:00
fit2cloud-chenyw
05099d4a26
perf: Third-party App Token Refresh Mechanism in the Assistant
2026-02-05 16:34:21 +08:00
ulleo
f790f2490b
feat: support data labels on charts
2026-02-05 11:47:47 +08:00
fit2cloud-chenyw
cac3c6e39e
style: Optimize WeCom scan code login style
2026-02-05 11:38:00 +08:00
Jianhui Zhao
245dab206c
Feat: support data labels on charts
2026-02-05 11:08:26 +08:00
dataeaseShu
beebe6ce2f
fix(System Management): Supports system variables
2026-02-05 10:49:33 +08:00
junjun
5105f8b51c
feat: support system variable
2026-02-05 10:37:55 +08:00
dataeaseShu
9fc8690a5c
fix(System Management): Supports system variables
2026-02-05 10:15:53 +08:00
junjun
d9129073b9
feat: support system variable
2026-02-05 10:15:46 +08:00
dataeaseShu
e930d68331
fix(Permission Configuration): Permission rules support binding to system variables.
2026-02-05 10:12:45 +08:00
dataeaseShu
439b253176
fix(User Management): Supports binding users to system variables.
2026-02-05 10:12:36 +08:00
dataeaseShu
17d8cc97a5
feat(System Management): Supports system variables
2026-02-05 10:07:15 +08:00
fit2cloud-chenyw
ead7cb36ac
perf: Community Edition Does Not Display Sync Users
2026-02-04 19:21:43 +08:00
fit2cloud-chenyw
119955f277
perf: Third-Party Token Refresh Optimization in Assistant
2026-02-04 18:36:18 +08:00
junjun
4135aa3b1b
refactor: Optimize row permission logic
2026-02-04 17:59:50 +08:00
ulleo
b5b6282b85
fix: prevent scientific notation in exported Excel data
2026-02-04 17:30:20 +08:00
junjun
566d6ead14
feat: mcp provide datasource
2026-02-04 17:07:16 +08:00
fit2cloud-chenyw
e3363923d6
perf: API Permission Error Message Optimization
2026-02-04 16:33:11 +08:00
ulleo
e2e4459a7c
pref: improve date format display while querying data
2026-02-04 16:29:55 +08:00
ulleo
d0bc870cc2
fix: fix encoding issues when querying BIT type fields
2026-02-04 16:13:54 +08:00
ulleo
32af7a11d7
feat: add dimension and metric field constraints to SQL generation templates
2026-02-04 15:21:56 +08:00
jackieya