1b3acce7e9
Replace substring matching with word-boundary regex in query endpoint's table access validation. Prevents false positives where short table names like 'id' would block any query containing the word. Uses re.escape() to safely handle special characters in table names. - Import re module at top - Use regex pattern with word boundaries (\b) for matching - Add tests to verify no false positives and proper blocking |
||
|---|---|---|
| .. | ||
| api | ||
| auth | ||
| web | ||
| __init__.py | ||
| instance_config.py | ||
| main.py | ||