egg f90a8a57b4 fix(security): add table_name whitelist to prevent SQL injection in table query APIs ...

The /api/query_table and /api/get_table_columns endpoints accepted arbitrary
table_name values that were interpolated directly into SQL f-strings. Since
api_public is true, any unauthenticated user could exploit this. Now validates
table_name and time_field against TABLES_CONFIG before reaching the database.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-11 10:44:56 +08:00

..

e2e

feat(wip): preserve filters between Overview and Detail with thundering-herd fix

2026-02-11 07:22:48 +08:00

fixtures

chore: finalize vite migration hardening and archive openspec changes

2026-02-08 20:03:36 +08:00

stress

fix(hold): dedup equipment cache, fix portal iframe, improve Hold dashboards

2026-02-11 09:01:02 +08:00

conftest.py

feat: complete dashboard-vite parity and fix portal health/csp regressions

2026-02-09 09:22:23 +08:00

test_api_integration.py

fix(security): add table_name whitelist to prevent SQL injection in table query APIs

2026-02-11 10:44:56 +08:00

test_app_factory.py

feat(hold-overview): add Hold Lot Overview page with TreeMap, Matrix, and cascade filtering

2026-02-10 13:02:24 +08:00

test_auth_integration.py

feat(portal): implement dynamic drawer/page navigation management

2026-02-09 11:34:04 +08:00

test_auth_service.py

chore: finalize vite migration hardening and watchdog logging

2026-02-08 22:55:38 +08:00

test_cache_integration.py

feat: complete dashboard-vite parity and fix portal health/csp regressions

2026-02-09 09:22:23 +08:00

test_cache_updater.py

chore: finalize vite migration hardening and watchdog logging

2026-02-08 22:55:38 +08:00

test_cache.py

feat(wip): preserve filters between Overview and Detail with thundering-herd fix

2026-02-11 07:22:48 +08:00

test_circuit_breaker.py

chore: finalize vite migration hardening and archive openspec changes

2026-02-08 20:03:36 +08:00

test_common_filters.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_database_redaction.py

chore: finalize vite migration hardening and archive openspec changes

2026-02-08 20:03:36 +08:00

test_degraded_responses.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_excel_query_e2e.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_excel_query_routes.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_excel_query_service.py

chore: finalize vite migration hardening and watchdog logging

2026-02-08 22:55:38 +08:00

test_field_contracts.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_frontend_compute_parity.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_health_routes.py

chore: finalize vite migration hardening and archive openspec changes

2026-02-08 20:03:36 +08:00

test_hold_history_routes.py

feat(hold-history): add Hold 歷史績效 Dashboard with trend, pareto, duration, and detail views

2026-02-10 18:03:08 +08:00

test_hold_history_service.py

feat(hold-history): add Hold 歷史績效 Dashboard with trend, pareto, duration, and detail views

2026-02-10 18:03:08 +08:00

test_hold_overview_routes.py

feat(hold-overview): add Hold Lot Overview page with TreeMap, Matrix, and cascade filtering

2026-02-10 13:02:24 +08:00

test_hold_routes.py

feat(wip): preserve filters between Overview and Detail with thundering-herd fix

2026-02-11 07:22:48 +08:00

test_job_query_routes.py

chore: finalize vite migration hardening and watchdog logging

2026-02-08 22:55:38 +08:00

test_job_query_service.py

chore: finalize vite migration hardening and watchdog logging

2026-02-08 22:55:38 +08:00

test_log_store.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_metrics.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_mid_section_defect_routes.py

feat(mid-section-defect): harden with distributed lock, rate limit, filter separation, abort, SQL classification and tests

2026-02-10 09:32:14 +08:00

test_mid_section_defect_service.py

feat(mid-section-defect): harden with distributed lock, rate limit, filter separation, abort, SQL classification and tests

2026-02-10 09:32:14 +08:00

test_page_registry.py

feat(hold-overview): add Hold Lot Overview page with TreeMap, Matrix, and cascade filtering

2026-02-10 13:02:24 +08:00

test_performance_integration.py

feat: complete dashboard-vite parity and fix portal health/csp regressions

2026-02-09 09:22:23 +08:00

test_permissions.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_qc_gate_routes.py

feat(qc-gate): add QC-GATE real-time LOT status report as first pure Vue 3 + Vite page

2026-02-09 13:06:59 +08:00

test_qc_gate_service.py

feat(qc-gate): add QC-GATE real-time LOT status report as first pure Vue 3 + Vite page

2026-02-09 13:06:59 +08:00

test_query_tool_routes.py

feat: complete dashboard-vite parity and fix portal health/csp regressions

2026-02-09 09:22:23 +08:00

test_query_tool_service.py

feat: complete dashboard-vite parity and fix portal health/csp regressions

2026-02-09 09:22:23 +08:00

test_rate_limit_routes.py

feat(hold-overview): add Hold Lot Overview page with TreeMap, Matrix, and cascade filtering

2026-02-10 13:02:24 +08:00

test_realtime_equipment_cache.py

fix(hold): dedup equipment cache, fix portal iframe, improve Hold dashboards

2026-02-11 09:01:02 +08:00

test_redis_client.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_resilience.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_resource_cache.py

feat(tables): migrate /tables page from Jinja2 to Vue 3 + Vite

2026-02-09 14:52:14 +08:00

test_resource_history_routes.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_resource_history_service.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_resource_routes.py

chore: finalize vite migration hardening and watchdog logging

2026-02-08 22:55:38 +08:00

test_resource_service.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_runtime_contract.py

chore: finalize vite migration hardening and archive openspec changes

2026-02-08 20:03:36 +08:00

test_runtime_hardening.py

feat: complete dashboard-vite parity and fix portal health/csp regressions

2026-02-09 09:22:23 +08:00

test_sql_builder.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_sql_loader.py

chore: reinitialize project with vite architecture

2026-02-08 08:30:48 +08:00

test_template_integration.py

feat(hold-overview): add Hold Lot Overview page with TreeMap, Matrix, and cascade filtering

2026-02-10 13:02:24 +08:00

test_tmtt_defect_routes.py

feat: complete dashboard-vite parity and fix portal health/csp regressions

2026-02-09 09:22:23 +08:00

test_tmtt_defect_service.py

feat: complete dashboard-vite parity and fix portal health/csp regressions

2026-02-09 09:22:23 +08:00

test_utils.py

chore: finalize vite migration hardening and archive openspec changes

2026-02-08 20:03:36 +08:00

test_watchdog_logging.py

chore: finalize vite migration hardening and watchdog logging

2026-02-08 22:55:38 +08:00

test_wip_hold_pages_integration.py

feat(wip): preserve filters between Overview and Detail with thundering-herd fix

2026-02-11 07:22:48 +08:00

test_wip_routes.py

feat(wip): preserve filters between Overview and Detail with thundering-herd fix

2026-02-11 07:22:48 +08:00

test_wip_service.py

feat(wip): preserve filters between Overview and Detail with thundering-herd fix

2026-02-11 07:22:48 +08:00

test_workcenter_mapping.py

chore: finalize vite migration hardening and archive openspec changes

2026-02-08 20:03:36 +08:00

test_worker_recovery_policy.py

chore: finalize vite migration hardening and archive openspec changes

2026-02-08 20:03:36 +08:00