mirror of https://github.com/buster-so/buster.git
3904f66dbc
- Add BlockedWildcardUsage error variant to SqlAnalyzerError enum - Enhance process_select_item to validate wildcards against physical tables - Block SELECT * and qualified wildcards on physical database tables - Allow wildcards on CTEs and derived tables - Add comprehensive tests for all wildcard validation scenarios - Maintain backward compatibility with legitimate query patterns This security enhancement prevents bypassing column-level permissions through wildcard queries on physical database tables while preserving functionality for CTEs and other legitimate use cases. Co-Authored-By: Dallin Bentley <dallinbentley98@gmail.com> |
||
|---|---|---|
| .. | ||
| api | ||
| cli | ||
| electric-server | ||
| server | ||
| trigger | ||
| web | ||
| tsconfig.json | ||