ZdenekSrotyr 23ae6a602c security: harden query endpoint SQL blocklist and disable external access ... Expand blocked keywords to cover parquet_scan, read_csv_auto, query_table, iceberg_scan, delta_scan, call, URL schemes (http/https/s3/gcs), and additional file-scan functions. Set enable_external_access=false on the non-read-only analytics connection path. Add three new tests covering parquet_scan, read_csv_auto, and query_table blocking.		2026-04-09 06:54:58 +02:00
..
api	security: harden query endpoint SQL blocklist and disable external access	2026-04-09 06:54:58 +02:00
auth	fix: raise RuntimeError on missing JWT_SECRET_KEY in non-test environments	2026-04-09 06:54:29 +02:00
web	fix: login page uses login_buttons format expected by template	2026-04-08 07:11:03 +02:00
__init__.py	feat: add FastAPI server with auth, RBAC, and all API endpoints	2026-03-27 15:19:18 +01:00
instance_config.py	feat: complete system — web UI, all API endpoints, governance, admin, CLI commands	2026-03-27 16:52:22 +01:00
main.py	security: fix auth (argon2, cookie, JWT), CORS, session middleware, pyproject.toml	2026-04-08 12:08:52 +02:00