ZdenekSrotyr 55515266ea fix: block DuckDB metadata functions and relative paths in query endpoint ... Add information_schema, duckdb_* introspection functions, pragma_* functions, and relative path traversal patterns to the SQL blocklist so users cannot enumerate schema metadata regardless of RBAC. Add six corresponding tests.		2026-04-09 16:29:11 +02:00
..
__init__.py	feat: add FastAPI server with auth, RBAC, and all API endpoints	2026-03-27 15:19:18 +01:00
access_requests.py	feat: access request UI — catalog badges, request modal, admin approval page	2026-03-31 12:45:29 +02:00
admin.py	fix: reject empty table name in register-table endpoint	2026-03-31 12:18:58 +02:00
catalog.py	refactor: replace local _get_data_dir() with shared app.utils.get_data_dir()	2026-04-09 07:05:50 +02:00
data.py	feat: add graceful shutdown handler	2026-04-09 07:03:45 +02:00
health.py	fix: handle timezone-naive timestamps in health check	2026-03-30 14:19:40 +02:00
jira_webhooks.py	chore: Docker prod config (Python 3.13, no reload), fix utcnow deprecation, update docs	2026-04-08 12:10:47 +02:00
memory.py	feat: complete system — web UI, all API endpoints, governance, admin, CLI commands	2026-03-27 16:52:22 +01:00
permissions.py	feat: implement data access control — table-level permissions	2026-03-31 12:33:31 +02:00
query.py	fix: block DuckDB metadata functions and relative paths in query endpoint	2026-04-09 16:29:11 +02:00
scripts.py	security: strip VIRTUAL_ENV/PYTHONPATH from script sandbox and block httpx	2026-04-09 06:58:26 +02:00
settings.py	feat: add dataset permissions, script execution, Kamal config, CI/CD	2026-03-27 15:40:11 +01:00
sync.py	feat: add graceful shutdown handler	2026-04-09 07:03:45 +02:00
telegram.py	feat: complete system — web UI, all API endpoints, governance, admin, CLI commands	2026-03-27 16:52:22 +01:00
upload.py	feat: add 50 MB upload size limit to session and artifact endpoints	2026-04-09 07:14:16 +02:00
users.py	feat: add FastAPI server with auth, RBAC, and all API endpoints	2026-03-27 15:19:18 +01:00