superset2/tests/unit_tests at cda5a055923fa02b2efb6fc19e575d0ce8107ddc - superset2 - HHTech

QT/superset2

mirror of https://github.com/apache/superset.git synced 2026-07-25 16:12:39 +00:00

Files

History

Amin Ghadersohi cda5a05592 fix(mcp): validate api_key_prefixes in CompositeTokenVerifier — filter empty/non-string entries

Empty-string prefixes match every Bearer token (DoS/misclassification vector).
Non-string entries cause TypeError in str.startswith(). Filter both in __init__,
warn on invalid entries, and only store valid non-empty string prefixes.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-27 21:03:18 +00:00

..

advanced_data_type

…

annotation_layers

…

…

chore(deps): bump tabulate from 0.9.0 to 0.10.0 (#40315 )

2026-05-25 18:55:24 -07:00

…

fix(dashboard-export): include and re-attach roles in import/export (#21000 ) (#40136 )

2026-05-27 10:49:07 -07:00

fix(bigquery): limit result set size to prevent browser memory crashes (#38588 )

2026-05-22 21:07:45 -07:00

test(datasets): regression test for Jinja not rendered on sync columns (#25839 ) (#40224 )

2026-05-20 11:46:36 -07:00

fix(query): restrict query cancellation to the query owner (#39996 )

2026-05-15 12:05:38 +01:00

fix(reports): escape SQL LIKE wildcards in find_by_extra_metadata (#38738 )

2026-04-09 12:58:06 +03:00

fix(dashboard-import): remap chartsInScope on import (#26338 ) (#40140 )

2026-05-20 13:41:14 -07:00

fix: OAuth2 exception should be 403 (#40074 )

2026-05-15 14:53:02 -03:00

fix(datasets): isolate filter state to fix concurrent /dataset race (#39685 )

2026-05-21 11:12:32 -07:00

feat: semantic layer extension (#37815 )

2026-05-05 12:07:46 -04:00

db_engine_specs

fix(bigquery): limit result set size to prevent browser memory crashes (#38588 )

2026-05-22 21:07:45 -07:00

distributed_lock

feat: add global task framework (#36368 )

2026-02-09 10:45:56 -08:00

test(examples): add tests for UUID threading and security bypass (#37557 )

2026-02-12 14:12:12 -08:00

…

fix(extensions): add cache headers and strip Vary: Cookie for extension static assets (#40120 )

2026-05-15 09:23:39 -03:00

…

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502 )

2026-05-11 10:24:42 -07:00

feat: add option for hash algorithms (#35621 )

2025-12-09 16:59:07 +00:00

fix(mcp): validate api_key_prefixes in CompositeTokenVerifier — filter empty/non-string entries

2026-05-27 21:03:18 +00:00

refactor: Enable G logging rules and comprehensive ruff improvements (#35081 )

2025-09-15 12:42:49 -07:00

fix(sqllab): keep saved-query list working when Jinja dataset(id) references a deleted dataset (#39703 )

2026-05-20 21:19:19 -07:00

pandas_postprocessing

test(prophet): pin yhat_lower can be negative for negative series (#21734 ) (#40141 )

2026-05-18 07:21:04 -07:00

fix: Enforce per-user caching on legacy API endpoint (#39789 )

2026-04-30 18:04:33 -03:00

fix(reports): enforce server-side recipient on chart/dashboard report subscriptions (#38847 )

2026-05-20 10:36:42 -07:00

feat(i18n): AI-assisted translation backfill tooling + Spanish translations (#39448 )

2026-05-22 21:07:27 -07:00

feat: semantic layer extension (#37815 )

2026-05-05 12:07:46 -04:00

semantic_layers

fix(semantic layers): coerce filter types (#40222 )

2026-05-21 09:25:27 -04:00

test(sql-parser): pin WITH+UNION as non-mutating across dialects (#25659 ) (#40138 )

2026-05-20 10:08:21 -07:00

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698 )

2026-04-20 18:29:51 -04:00

…

fix(tags): expire tag relationship after deleting all tagged objects (#38163 )

2026-03-04 10:37:19 -03:00

fix(OAuth2): Support OAuth2 exception with legacy endpoint (#39897 )

2026-05-05 21:21:48 -03:00

feat(theming): add per-theme custom font URL support (#36317 )

2025-12-08 16:46:01 -08:00

fix(thumbnails): stabilize digest by sorting datasources and charts (#38079 )

2026-02-20 09:51:35 +01:00

fix(reports): guard null dashboard height in Playwright screenshots (#40179 )

2026-05-21 09:19:29 -07:00

fix(rls): align view permission name with REST API canonical name (#33744 ) (#40145 )

2026-05-17 19:57:57 -07:00

__init__.py

…

config_test.py

chore: proper current_app.config proxy usage (#34345 )

2025-07-31 19:27:42 -07:00

conftest.py

fix: Bump FAB to 5.X (#33055 )

2025-09-12 09:21:37 +01:00

core_tests.py

…

dataframe_test.py

fix(api): nan is not properly handled for athena connections (#37071 )

2026-01-22 18:29:09 +03:00

extension_tests.py

fix(reports): keep body sized so standalone screenshots don't time out (#39944 )

2026-05-07 12:26:50 +02:00

feature_flag_test.py

…

initialization_test.py

chore: Support specifying app_root via superset_config.py (#38284 )

2026-02-28 01:35:08 -03:00

jinja_context_test.py

fix(jinja): drill-to-detail respects remove_filter=True in Jinja templates (#39594 )

2026-04-23 16:11:13 -03:00

legacy_tests.py

…

result_set_test.py

fix(SQL Lab): handle columns without names (#38986 )

2026-04-06 10:09:16 -04:00

sql_lab_execution_context.py

…

sql_lab_test.py

fix(rls): prevent double-apply when converting physical dataset to virtual (#39725 )

2026-05-14 18:05:48 +03:00

test_viz_cache_key.py

fix: Enforce per-user caching on legacy API endpoint (#39789 )

2026-04-30 18:04:33 -03:00

test_viz_get_df_payload.py

fix(OAuth2): Support OAuth2 exception with legacy endpoint (#39897 )

2026-05-05 21:21:48 -03:00