junjun
0f3529dc75
fix: Privilege Escalation Vulnerability
2026-04-23 11:38:11 +08:00
junjun
34e13a0241
fix: Excel field name is a pure numeric error message
2026-04-21 16:20:59 +08:00
ulleo
17b42d4cc2
feat(System): Language switch, supports Traditional Chinese.
2026-04-20 16:47:18 +08:00
fit2cloud-chenyw
4619dd4813
fix: Failed to save datasource while using Redis cache
2026-04-20 16:03:50 +08:00
ulleo
44ab276aaa
feat(System): Language switch, supports Traditional Chinese.
2026-04-20 15:54:15 +08:00
junjun
ed919c9c49
fix: Fix es self signed certificate
2026-04-20 13:33:40 +08:00
junjun
0e0b8736fe
refactor: upload excel error tips
2026-04-20 13:29:17 +08:00
junjun
20632f8486
fix: The system reports an error when uploading an Excel file with null values
2026-04-20 10:17:57 +08:00
ulleo
22dc17baf8
feat(System): Language switch, supports Traditional Chinese.
2026-04-17 18:06:02 +08:00
fit2cloud-chenyw
559c80c5b9
perf: Optimize frontend localStorage key conflicts
2026-04-14 12:04:13 +08:00
ulleo
9c1f4cf4c2
feat: improve generate sql quality
2026-04-09 16:57:16 +08:00
ulleo
882d0e6e89
feat: improve generate sql/chart quality
2026-04-08 16:57:10 +08:00
ulleo
594df91235
feat: improve generate sql quality
2026-04-07 19:06:17 +08:00
junjun
7f543cf194
feat: SQLBot supports custom data types in data sources #768
2026-04-03 16:22:37 +08:00
junjun
b05d90c6c8
feat: MCP supports configuration to disable rendering charts
2026-03-30 10:47:12 +08:00
junjun
f88cb01117
feat: MCP supports selecting workspaces #926
2026-03-24 16:18:49 +08:00
junjun
54f1da7652
feat: MCP supports selecting workspaces #926
2026-03-24 16:17:23 +08:00
junjun
49b08b07dd
feat: MCP supports selecting workspaces #926
2026-03-24 16:00:41 +08:00
junjun
11d1affa29
feat: MCP supports selecting workspaces #926
2026-03-24 15:40:56 +08:00
junjun
0c1cbd4831
feat: MCP supports selecting workspaces #926
2026-03-24 15:10:24 +08:00
junjun
d55c30be4a
feat: MCP supports selecting workspaces #926
2026-03-24 14:36:29 +08:00
junjun
f32e1fdff3
feat: MCP supports selecting workspaces #926
2026-03-24 14:21:59 +08:00
junjun
f6a0a5bb4d
feat: MCP supports selecting workspaces #926
2026-03-24 14:01:03 +08:00
junjun
e5e9e535ea
fix: MySQL adds SSL configuration
2026-03-24 10:17:49 +08:00
xuwei-fit2cloud
65b386138c
Update PyPI mirror URL to Aliyun
2026-03-18 17:10:38 +08:00
xuwei-fit2cloud
a645de1a25
Bump version from 1.6.0 to 1.7.0
2026-03-18 15:49:22 +08:00
fit2cloud-chenyw
3eca13735b
perf: Cancel Duplicate Email Verification
2026-03-17 15:19:31 +08:00
junjun
0315e27fd0
feat: Support SSL for MySQL
2026-03-17 15:12:49 +08:00
fit2cloud-chenyw
5c136b46c5
perf: Optimize Embedded Assistant Cache Settings
2026-03-17 14:38:42 +08:00
fit2cloud-chenyw
8b8cd3e8c9
perf: System variables are set as user-selectable attributes
2026-03-17 12:31:29 +08:00
fit2cloud-chenyw
24d5f2a3d5
fix: The max_tokens parameter in the model configuration is invalid
2026-03-17 11:37:01 +08:00
junjun
b9594285e8
feat: support system variable
2026-03-17 10:57:02 +08:00
junjun
527b18fa82
feat: support system variable
2026-03-17 10:36:05 +08:00
junjun
606949af67
feat: support system variable
2026-03-16 18:20:33 +08:00
fit2cloud-chenyw
6d63dcefc5
fix: Clickjacking Attack
2026-03-16 15:44:57 +08:00
junjun
a357dd01a4
feat: support system variable
2026-03-16 14:23:53 +08:00
fit2cloud-chenyw
b181d64e6d
perf: Failed to create third-party user due to missing system variables
2026-03-16 14:13:17 +08:00
jackieya
4feb553c42
refactor: optimize decorator order and fix HTTPException imports per review
2026-03-16 10:37:37 +08:00
jackieya
2772cde16e
security: fix RCE via terminology poisoning and restrict upload access
2026-03-16 10:37:37 +08:00
junjun
5963561933
refactor: system variable sort by name
2026-03-16 10:01:58 +08:00
junjun
bb30a3a545
fix: Fix SSRF causing arbitrary file read vulnerability
2026-03-13 18:21:24 +08:00
junjun
beeddb64c6
refactor: system variable sort by create time
2026-03-13 17:24:13 +08:00
junjun
15c75365ae
refactor: The data table supports enabling and disabling
2026-03-13 14:06:25 +08:00
anch0r00
94ca094467
style: fix import order for psycopg2
2026-03-11 15:44:55 +08:00
anch0r00
39f2203cec
fix: prevent SQL injection in uploadExcel via psycopg2.sql.Identifier
2026-03-11 15:44:55 +08:00
junjun
ff98514827
fix: Fix SSRF causing arbitrary file read vulnerability
2026-03-10 10:48:33 +08:00
ulleo
0ff44b4d94
fix: fix log persistence issues with concurrent question requests
...
#940
2026-03-04 18:04:18 +08:00
Langel
0dd6536bf8
fix: add missing comma in whitelist.py causing /mcp* routes to be unwhitelisted
...
"*.css.map" was missing a trailing comma, causing Python's implicit string
literal concatenation to merge it with the next entry into "*.css.map/mcp*".
This made the /mcp* whitelist rule never match, so all /mcp/* endpoints
(mcp_start, mcp_question, mcp_get_sql, mcp_execute_sql, etc.) were blocked
by TokenMiddleware with "Miss Token[X-SQLBOT-TOKEN]" even though they are
intended to handle their own authentication internally.
2026-03-02 11:08:43 +08:00
wangjiahao
82de276aad
feat(dashboard): The dashboard supports displaying real-time data
2026-02-28 16:02:08 +08:00
王嘉豪
9dccaf12d1
feat(dashboard): The dashboard supports displaying real-time data ( #930 )
2026-02-28 14:53:51 +08:00
junjun