fit2cloud-chenyw
6d63dcefc5
fix: Clickjacking Attack
2026-03-16 15:44:57 +08:00
junjun
a357dd01a4
feat: support system variable
2026-03-16 14:23:53 +08:00
fit2cloud-chenyw
b181d64e6d
perf: Failed to create third-party user due to missing system variables
2026-03-16 14:13:17 +08:00
jackieya
4feb553c42
refactor: optimize decorator order and fix HTTPException imports per review
2026-03-16 10:37:37 +08:00
jackieya
2772cde16e
security: fix RCE via terminology poisoning and restrict upload access
2026-03-16 10:37:37 +08:00
junjun
5963561933
refactor: system variable sort by name
2026-03-16 10:01:58 +08:00
junjun
bb30a3a545
fix: Fix SSRF causing arbitrary file read vulnerability
2026-03-13 18:21:24 +08:00
junjun
beeddb64c6
refactor: system variable sort by create time
2026-03-13 17:24:13 +08:00
junjun
15c75365ae
refactor: The data table supports enabling and disabling
2026-03-13 14:06:25 +08:00
anch0r00
94ca094467
style: fix import order for psycopg2
2026-03-11 15:44:55 +08:00
anch0r00
39f2203cec
fix: prevent SQL injection in uploadExcel via psycopg2.sql.Identifier
2026-03-11 15:44:55 +08:00
junjun
ff98514827
fix: Fix SSRF causing arbitrary file read vulnerability
2026-03-10 10:48:33 +08:00
ulleo
0ff44b4d94
fix: fix log persistence issues with concurrent question requests
...
#940
2026-03-04 18:04:18 +08:00
Langel
0dd6536bf8
fix: add missing comma in whitelist.py causing /mcp* routes to be unwhitelisted
...
"*.css.map" was missing a trailing comma, causing Python's implicit string
literal concatenation to merge it with the next entry into "*.css.map/mcp*".
This made the /mcp* whitelist rule never match, so all /mcp/* endpoints
(mcp_start, mcp_question, mcp_get_sql, mcp_execute_sql, etc.) were blocked
by TokenMiddleware with "Miss Token[X-SQLBOT-TOKEN]" even though they are
intended to handle their own authentication internally.
2026-03-02 11:08:43 +08:00
wangjiahao
82de276aad
feat(dashboard): The dashboard supports displaying real-time data
2026-02-28 16:02:08 +08:00
王嘉豪
9dccaf12d1
feat(dashboard): The dashboard supports displaying real-time data ( #930 )
2026-02-28 14:53:51 +08:00
junjun
28ff1c9a0b
fix: Fix the issue of incorrect data source connection pool recycling
2026-02-10 17:01:24 +08:00
fit2cloud-chenyw
5208b59800
fix: Authentication is required to access the API documentation #839
2026-02-09 16:47:40 +08:00
junjun
5105f8b51c
feat: support system variable
2026-02-05 10:37:55 +08:00
junjun
d9129073b9
feat: support system variable
2026-02-05 10:15:46 +08:00
junjun
4135aa3b1b
refactor: Optimize row permission logic
2026-02-04 17:59:50 +08:00
ulleo
b5b6282b85
fix: prevent scientific notation in exported Excel data
2026-02-04 17:30:20 +08:00
junjun
566d6ead14
feat: mcp provide datasource
2026-02-04 17:07:16 +08:00
fit2cloud-chenyw
e3363923d6
perf: API Permission Error Message Optimization
2026-02-04 16:33:11 +08:00
ulleo
e2e4459a7c
pref: improve date format display while querying data
2026-02-04 16:29:55 +08:00
ulleo
d0bc870cc2
fix: fix encoding issues when querying BIT type fields
2026-02-04 16:13:54 +08:00
ulleo
32af7a11d7
feat: add dimension and metric field constraints to SQL generation templates
2026-02-04 15:21:56 +08:00
xuwei-fit2cloud
22bd467c04
Add numpy version 2.3.5 to dependencies
2026-02-04 15:14:01 +08:00
xuwei-fit2cloud
b85511f256
Bump version from 1.5.0 to 1.6.0
2026-02-04 15:12:35 +08:00
junjun
989eef51d6
fix: assistant support oracle connection mode
2026-02-04 14:25:20 +08:00
junjun
ec11ddcc7f
feat: mcp provide datasource
2026-02-04 11:51:34 +08:00
junjun
a466e05db9
feat: mcp provide datasource
2026-02-04 11:43:22 +08:00
junjun
9b34e25f70
feat: mcp provide datasource
2026-02-04 11:37:57 +08:00
junjun
cb633cb32a
fix: assistant support oracle connection mode
2026-02-04 10:58:40 +08:00
ulleo
5dc22cbe21
chore: update pyproject.toml
2026-02-03 16:31:00 +08:00
ulleo
764f6cfe29
chore: update pyproject.toml
2026-02-03 16:29:56 +08:00
fit2cloud-chenyw
175138758a
fix: Workspace edit led to wrong permission changes
2026-02-03 11:29:10 +08:00
junjun
fa0b13b06e
fix: check sql only contain read operation
2026-02-02 17:42:00 +08:00
ulleo
204a3df78c
feat: add chat log step display
2026-02-02 16:58:24 +08:00
fit2cloud-chenyw
bda2c66077
perf: Optimize Third-Party QR Code Login
2026-02-02 16:51:50 +08:00
ulleo
d5e54f86b1
feat: support specifying datasource ID in MCP question
2026-02-02 16:07:24 +08:00
junjun
19c38321c0
refactor: sql server support selecting compatibility with lower versions
2026-02-02 14:07:06 +08:00
junjun
e8508681a3
fix: check sql only contain read operation
2026-02-02 10:07:39 +08:00
ulleo
9decb9189b
perf: Assistant uses workspace-level Q&A configuration
2026-01-30 17:06:29 +08:00
ulleo
041a0a3a9e
feat: improve template
2026-01-30 16:25:05 +08:00
ulleo
733227dfe1
feat: add chat log step display
...
#324
#742
2026-01-29 17:09:58 +08:00
ulleo
8a1a9e01d3
feat: add chat log step display
...
#324
#742
2026-01-29 16:53:47 +08:00
junjun
07af6d0066
fix: check sql only contain read operation #814
2026-01-29 14:44:58 +08:00
junjun
bf56c3e486
fix: check sql only contain read operation #814
2026-01-29 14:22:16 +08:00
junjun
184e76ebc2
fix: check sql only contain read operation #814
2026-01-29 14:09:12 +08:00
fit2cloud-chenyw