ulleo 5b94406c3a fix: Fix SQL injection / LLM Prompt Injection vulnerability causing unauthorized queries ...

Security hardening:
- Add SQLBOT_ALLOW_METADATA_QUERIES config option, disable SHOW/DESCRIBE/EXPLAIN by default
- Add table whitelist check, use sqlglot to parse actual SQL table names and compare with authorized table list
- Add dangerous function check, block LOAD_FILE, INTO OUTFILE, EXEC etc. by database type
- Improve check_sql_read to return specific error reasons for better debugging

2026-06-11 17:29:38 +08:00

..

__init__.py

feat: generate sql with history

2025-05-30 17:41:45 +08:00

llm.py

fix: Fix SQL injection / LLM Prompt Injection vulnerability causing unauthorized queries

2026-06-11 17:29:38 +08:00