Commit Graph
59 Commits
Author SHA1 Message Date
fit2cloud-chenyw a70eb1b308 fix: Embedded security vulnerabilities 2026-07-14 15:31:42 +08:00
junjun 936bb5d390 fix: Compatible with older versions of MSSQL in DataEase 2026-06-23 14:57:10 +08:00
ulleo 5b94406c3a fix: Fix SQL injection / LLM Prompt Injection vulnerability causing unauthorized queries
Security hardening:
- Add SQLBOT_ALLOW_METADATA_QUERIES config option, disable SHOW/DESCRIBE/EXPLAIN by default
- Add table whitelist check, use sqlglot to parse actual SQL table names and compare with authorized table list
- Add dangerous function check, block LOAD_FILE, INTO OUTFILE, EXEC etc. by database type
- Improve check_sql_read to return specific error reasons for better debugging
2026-06-11 17:29:38 +08:00
ulleo e72c0bedda fix: Fix the data source-related issues in the PR 2026-05-11 15:07:15 +08:00
fit2cloud-chenyw 5c136b46c5 perf: Optimize Embedded Assistant Cache Settings 2026-03-17 14:38:42 +08:00
fit2cloud-chenyw 6d63dcefc5 fix: Clickjacking Attack 2026-03-16 15:44:57 +08:00
junjun cb633cb32a fix: assistant support oracle connection mode 2026-02-04 10:58:40 +08:00
fit2cloud-chenyw b9ce9d3ddf perf: Optimize DataEase integration with Advanced Assistant 2026-01-24 17:44:37 +08:00
ulleo 0dc289956b feat: improve chart field name matching with original table structure 2026-01-22 14:30:58 +08:00
fit2cloud-chenyw 32c95f080a perf: Log Optimization for Advanced Applications Calling Remote Data Source APIs 2026-01-20 16:25:00 +08:00
junjun 74e0e3a93d fix(assistant): After the assistant is embedded in DataEase, the query times out. 2026-01-15 14:08:53 +08:00
fit2cloud-chenyw 2cf44ac364 perf: Embedded Application Deletion Error 2025-12-23 19:47:22 +08:00
junjun d92c377e59 refactor: assistant support all sqlbot datasource 2025-12-04 17:35:01 +08:00
王嘉豪 661b007dab refactor: update assistant i18n info (#580) 2025-12-04 14:25:31 +08:00
王嘉豪 b451d1f057 fix: package error (#549) 2025-12-02 17:53:55 +08:00
王嘉豪 3c948d7a4d fix: Optimize the internationalization prompt of the assistant (#546) 2025-12-02 16:13:43 +08:00
fit2cloud-chenyw aa0b31991e perf: API Optimization for Multi-Domain Validation in Embedded Advanced Assistants 2025-12-02 11:37:56 +08:00
junjun 1fb1ae6f8e refactor: assistant support all sqlbot datasource #467 2025-11-28 10:18:35 +08:00
junjun 3a12e4d700 refactor: assistant support all sqlbot datasource #467 2025-11-27 17:41:02 +08:00
junjun d916e2911f refactor: assistant support all sqlbot datasource #467 2025-11-27 11:44:46 +08:00
junjun d1f5fd9e44 refactor: assistant support all sqlbot datasource 2025-11-27 11:22:08 +08:00
fit2cloud-chenyw 0e418d2ee8 perf: Optimize embedded compatibility for multi-domain verification 2025-11-26 13:29:26 +08:00
fit2cloud-chenyw c7693fc880 perf: Multiple Domain Validation for Embedded Systems #388 2025-11-25 21:43:21 +08:00
fit2cloud-chenyw caa38bfb20 fix: Advanced Assistant: Dynamic Data Source with Case-Insensitive Type Handling 2025-10-22 12:27:08 +08:00
junjun f4682b3fe1 feat: Vector retrieval matches tables 2025-10-13 14:48:22 +08:00
junjun 2ebac00f87 feat: Vector retrieval matches tables 2025-10-10 16:37:15 +08:00
junjun c5466459e9 feat: Vector retrieval matches tables 2025-10-09 10:05:10 +08:00
fit2cloud-chenyw ae63a92734 perf: Embedded page interactive 2025-09-18 14:32:01 +08:00
fit2cloud-chenyw db8fc429fe fix: The schema field was missed in the Assistant's AES encryption process 2025-09-10 18:21:53 +08:00
fit2cloud-chenyw cd3054ed38 perf: The advanced assistant application does not enable AES encryption by default 2025-09-03 18:57:56 +08:00
fit2cloud-chenyw b8b0825290 perf: DataSource Failure Notification for Assistant 2025-09-03 17:12:18 +08:00
fit2cloud-chenyw 2b5e922a1f perf: Assistant basic applications use the default private data source mechanism 2025-09-02 14:34:50 +08:00
fit2cloud-chenyw dfc1c12428 perf: Embedded Data Source Interface Supports AES Encryption 2025-08-28 16:01:22 +08:00
fit2cloud-chenyw 54e2cdf953 perf: Optimize embedded page style layout 2025-08-21 12:06:48 +08:00
wxg 516e3810d6 Update assistant.py
Remove unused code
2025-08-07 14:09:33 +08:00
fit2cloud-chenyw 8f7f67dd55 perf: Assistant ds 2025-07-29 20:38:35 +08:00
junjun f6253cdb0c feat: connect 2025-07-29 12:00:03 +08:00
junjun 8141700746 feat: assistant connect 2025-07-29 11:47:12 +08:00
fit2cloud-chenyw 7cd4d783cd perf: Assistant dynamic ds api param 2025-07-29 09:34:52 +08:00
fit2cloud-chenyw 5b7272d584 perf: Assistant dynamic ds 2025-07-28 21:39:15 +08:00
fit2cloud-chenyw 26106cdbcb perf: Assistant dynamic ds 2025-07-28 17:11:03 +08:00
fit2cloud-chenyw da167c027e perf: Assistant oid query 2025-07-27 19:28:13 +08:00
fit2cloud-chenyw 115016c262 perf: Assistant switch online 2025-07-27 00:56:07 +08:00
fit2cloud-chenyw 1169f825d6 perf: Assistant model warn 2025-07-25 14:56:46 +08:00
fit2cloud-chenyw 73a47c3107 perf: Enable assistant cache 2025-07-23 10:49:48 +08:00
fit2cloud-chenyw 3dd956f161 perf: Disable assistant cache 2025-07-23 10:30:15 +08:00
fit2cloud-chenyw 0f6a772e80 perf: Assistant dynamic ds id 2025-07-22 21:43:38 +08:00
fit2cloud-chenyw 36d52dfa67 perf: Assistant dynamic certificate 2025-07-22 12:20:51 +08:00
fit2cloud-chenyw 8dbac2a101 perf: Assistant dynamic ds 2025-07-22 10:16:58 +08:00
fit2cloud-chenyw fbcb147b8b perf: Simple assistant 2025-07-21 19:20:24 +08:00