junjun
936bb5d390
fix: Compatible with older versions of MSSQL in DataEase
2026-06-23 14:57:10 +08:00
ulleo
5b94406c3a
fix: Fix SQL injection / LLM Prompt Injection vulnerability causing unauthorized queries
...
Security hardening:
- Add SQLBOT_ALLOW_METADATA_QUERIES config option, disable SHOW/DESCRIBE/EXPLAIN by default
- Add table whitelist check, use sqlglot to parse actual SQL table names and compare with authorized table list
- Add dangerous function check, block LOAD_FILE, INTO OUTFILE, EXEC etc. by database type
- Improve check_sql_read to return specific error reasons for better debugging
2026-06-11 17:29:38 +08:00
junjun
7637ab391d
fix: Fix the privilege escalation vulnerability in system variables
2026-06-08 17:01:44 +08:00
junjun
ba7b397c51
fix: Fix the privilege escalation vulnerability in system variables
2026-06-08 16:54:17 +08:00
junjun
81c8acda91
fix: Fix the privilege escalation vulnerability in system variables
2026-06-08 16:33:34 +08:00
junjun
80dc9a3aa8
fix: Fix the privilege escalation vulnerability in system variables
2026-06-08 15:26:55 +08:00
junjun
98dba5f517
fix: Fix the privilege escalation vulnerability in system variables
2026-06-04 16:42:48 +08:00
ulleo
d5d5e87b51
feat(Application): Application can configure specified model
2026-06-04 15:06:09 +08:00
ulleo
c53ac8f720
feat(Model Configuration): Supported Authorized Space
2026-06-04 14:38:00 +08:00
ulleo
3f3dc08a67
feat(Model Configuration): Supported Authorized Space
2026-06-04 10:49:30 +08:00
ulleo
f691b3e03a
feat(Application): Application can configure specified model
2026-06-03 17:29:09 +08:00
ulleo
835eefcb39
fix: remove svg image support in upload files
2026-06-03 15:55:05 +08:00
ulleo
d57cf3aee6
feat(Application): Application can configure specified model
2026-06-02 16:59:24 +08:00
ulleo
23ca654bc4
feat(Application): Application can configure specified model
2026-06-02 16:24:44 +08:00
ulleo
4b0d4ce663
feat(Application): Application can configure specified model
2026-06-02 14:46:55 +08:00
ulleo
46de2322b0
feat(Application): Application can configure specified model
2026-06-02 14:18:35 +08:00
ulleo
ba16432a66
feat(Application): Application can configure specified model
2026-06-02 14:05:52 +08:00
fit2cloud-chenyw
a26b173165
fix(X-Pack): Unable to save model due to long API Key #1090
2026-05-22 11:57:02 +08:00
ulleo
e72c0bedda
fix: Fix the data source-related issues in the PR
2026-05-11 15:07:15 +08:00
ulleo
387731236e
feat(Application): Application can configure specified model
2026-04-30 15:23:32 +08:00
ulleo
22dc17baf8
feat(System): Language switch, supports Traditional Chinese.
2026-04-17 18:06:02 +08:00
fit2cloud-chenyw
3eca13735b
perf: Cancel Duplicate Email Verification
2026-03-17 15:19:31 +08:00
fit2cloud-chenyw
5c136b46c5
perf: Optimize Embedded Assistant Cache Settings
2026-03-17 14:38:42 +08:00
fit2cloud-chenyw
8b8cd3e8c9
perf: System variables are set as user-selectable attributes
2026-03-17 12:31:29 +08:00
fit2cloud-chenyw
6d63dcefc5
fix: Clickjacking Attack
2026-03-16 15:44:57 +08:00
junjun
a357dd01a4
feat: support system variable
2026-03-16 14:23:53 +08:00
fit2cloud-chenyw
b181d64e6d
perf: Failed to create third-party user due to missing system variables
2026-03-16 14:13:17 +08:00
junjun
5963561933
refactor: system variable sort by name
2026-03-16 10:01:58 +08:00
junjun
beeddb64c6
refactor: system variable sort by create time
2026-03-13 17:24:13 +08:00
junjun
d9129073b9
feat: support system variable
2026-02-05 10:15:46 +08:00
fit2cloud-chenyw
e3363923d6
perf: API Permission Error Message Optimization
2026-02-04 16:33:11 +08:00
junjun
cb633cb32a
fix: assistant support oracle connection mode
2026-02-04 10:58:40 +08:00
fit2cloud-chenyw
175138758a
fix: Workspace edit led to wrong permission changes
2026-02-03 11:29:10 +08:00
fit2cloud-chenyw
d640ac31d1
perf: Optimize datasource-related API permission validation
2026-01-28 17:03:58 +08:00
fit2cloud-chenyw
bca72fc96d
perf: Assistant uses workspace-level Q&A configuration
2026-01-28 14:15:46 +08:00
fit2cloud-chenyw
b9ce9d3ddf
perf: Optimize DataEase integration with Advanced Assistant
2026-01-24 17:44:37 +08:00
ulleo
0dc289956b
feat: improve chart field name matching with original table structure
2026-01-22 14:30:58 +08:00
fit2cloud-chenyw
32c95f080a
perf: Log Optimization for Advanced Applications Calling Remote Data Source APIs
2026-01-20 16:25:00 +08:00
junjun
74e0e3a93d
fix(assistant): After the assistant is embedded in DataEase, the query times out.
2026-01-15 14:08:53 +08:00
fit2cloud-chenyw
6c7fd8c00f
perf: The assistant is optimized for manual data source selection
2026-01-15 09:20:33 +08:00
fit2cloud-chenyw
e54a5fe46f
perf: Place the assistant menu in the workspace
2026-01-09 17:40:42 +08:00
fit2cloud-chenyw
8260926a12
perf: Optimize API Key Page
2025-12-31 10:07:40 +08:00
wangjiahao
95b058a2ad
refactor: add log
2025-12-30 17:39:55 +08:00
wangjiahao
cdc086c2b4
Merge remote-tracking branch 'origin/main'
2025-12-30 11:33:43 +08:00
wangjiahao
57b3e6284f
refactor: update log
2025-12-30 11:33:12 +08:00
fit2cloud-chenyw
754b9f2565
fix: JPEG format not allowed for assistant images
2025-12-30 10:41:53 +08:00
fit2cloud-chenyw
b0150f6be5
fix: Image upload size limit exceeded
2025-12-30 10:37:40 +08:00
fit2cloud-chenyw
77f2b4d7c7
Pr@main@feat user batch import ( #694 )
...
* feat: User Batch Import
* perf: Disable user import option
2025-12-26 17:55:36 +08:00
wangjiahao
714a14b235
Merge remote-tracking branch 'origin/main'
2025-12-26 17:14:50 +08:00
wangjiahao
1df98cec0f
refactor: Add logs to the system operation method
2025-12-26 17:14:34 +08:00
junjun