Hi. My security team did scanning on Superset coz we want to publish it to public but got SQL injection issue.\nUsing the POST HTTP method, Nessus found that :\n\u00a0\n+ The following resources may be vulnerable to blind SQL injection :\n\u00a0\n+ The 'csrf_token' parameter of the /login/ CGI :\n\u00a0\n/login/ [username=&amp;password=&amp;csrf_token=IjRhN2EyOWUxNGZjODJhMDA2ODI5MDJh\nNzBjODk3Zjc3NWM0YTY5ZDMi.XaqJAg.3m8Jp_kQzWW9pDt4MM2JjktP5Vkzz&amp;password=&amp;\ncsrf_token=IjRhN2EyOWUxNGZjODJhMDA2ODI5MDJhNzBjODk3Zjc3NWM0YTY5ZDMi.XaqJ\nAg.3m8Jp_kQzWW9pDt4MM2JjktP5Vkyy]\n\u00a0\n-------- output --------\n\u00a0\n*Bad Request*\nThe CSRF tokens do not match.\n\u00a0\n\u00a0\n-------- vs --------\n\u00a0\n*Bad Request*\nThe CSRF token is invalid.\n------------------------