ulleo 5b94406c3a fix: Fix SQL injection / LLM Prompt Injection vulnerability causing unauthorized queries ...

Security hardening:
- Add SQLBOT_ALLOW_METADATA_QUERIES config option, disable SHOW/DESCRIBE/EXPLAIN by default
- Add table whitelist check, use sqlglot to parse actual SQL table names and compare with authorized table list
- Add dangerous function check, block LOAD_FILE, INTO OUTFILE, EXEC etc. by database type
- Improve check_sql_read to return specific error reasons for better debugging

2026-06-11 17:29:38 +08:00

..

api

fix: Fix the privilege escalation vulnerability in system variables

2026-06-08 16:54:17 +08:00

crud

fix: Fix SQL injection / LLM Prompt Injection vulnerability causing unauthorized queries

2026-06-11 17:29:38 +08:00

middleware

perf: Assistant uses workspace-level Q&A configuration

2026-01-28 14:15:46 +08:00

models

feat(Application): Application can configure specified model

2026-06-02 16:24:44 +08:00

schemas

feat(Model Configuration): Supported Authorized Space

2026-06-04 10:49:30 +08:00

__init__.py

feat: Login api

2025-04-23 21:14:42 +08:00