mirror of https://github.com/buster-so/buster.git
3904f66dbc
- Add BlockedWildcardUsage error variant to SqlAnalyzerError enum - Enhance process_select_item to validate wildcards against physical tables - Block SELECT * and qualified wildcards on physical database tables - Allow wildcards on CTEs and derived tables - Add comprehensive tests for all wildcard validation scenarios - Maintain backward compatibility with legitimate query patterns This security enhancement prevents bypassing column-level permissions through wildcard queries on physical database tables while preserving functionality for CTEs and other legitimate use cases. Co-Authored-By: Dallin Bentley <dallinbentley98@gmail.com> |
||
|---|---|---|
| .cursor/rules | ||
| .github | ||
| .vscode | ||
| apps | ||
| assets | ||
| ee | ||
| packages | ||
| scripts | ||
| .DS_Store | ||
| .env.example | ||
| .gitignore | ||
| .pnpmrc | ||
| .release-please-config.json | ||
| CLAUDE.md | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| SECURITY.md | ||
| biome.json | ||
| docker-compose.yml | ||
| package.json | ||
| pnpm-lock.yaml | ||
| pnpm-workspace.yaml | ||
| tsconfig.json | ||
| turbo.json | ||
| vitest.config.ts | ||
README.md
The Buster Platform
Build reliable AI data analysts
What is Buster?
Buster is an open-source platform for deploying AI data analysts - empowering everyone at your company to explore data on their own.
Support and feedback
You can contact us through either:
- Github Discussions
- Email us at founders at buster dot com
License
This repository is MIT licensed, except for the ee folders. See LICENSE for more details.