ulleo 5b94406c3a fix: Fix SQL injection / LLM Prompt Injection vulnerability causing unauthorized queries ...

Security hardening:
- Add SQLBOT_ALLOW_METADATA_QUERIES config option, disable SHOW/DESCRIBE/EXPLAIN by default
- Add table whitelist check, use sqlglot to parse actual SQL table names and compare with authorized table list
- Add dangerous function check, block LOAD_FILE, INTO OUTFILE, EXEC etc. by database type
- Improve check_sql_read to return specific error reasons for better debugging

2026-06-11 17:29:38 +08:00

..

__init__.py

feat: db module

2025-05-09 17:47:38 +08:00

constant.py

fix: remove sqlite datasource

2026-06-04 11:40:31 +08:00

db_sql.py

fix: remove sqlite datasource

2026-06-04 11:40:31 +08:00

db.py

fix: Fix SQL injection / LLM Prompt Injection vulnerability causing unauthorized queries

2026-06-11 17:29:38 +08:00

engine.py

feat: connect

2025-07-29 12:00:03 +08:00

es_engine.py

fix: Fix es self signed certificate

2026-04-20 13:33:40 +08:00