Superset Dev e5ed37a333 fix(guest-tokens): reject result types that expand a chart to raw rows ...

query_context_modified() compared columns/metrics/order-by against the
stored chart but never compared result_type, and the samples/drill_detail
preparers in query_actions.py rewrite an accepted query to every column
on the datasource (dropping metrics/post_processing) after that check has
already passed. Add _result_type_modified(), checking the request's
top-level and per-query result_type (samples or drill_detail) against
the stored chart's own saved query context; unless the chart itself uses
one of those result types, requesting it now fails the guest tamper
check.

2026-08-21 00:41:12 -07:00

..

common

refactor: update Connection.execute() to use queries with text() (#40277)

2026-06-22 15:36:15 -07:00

consts

…

example_data

refactor: replace Engine.execute() with Connection.execute() (#41917)

2026-07-13 09:40:33 -07:00

fixtures

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

integration_tests

fix(charts): align grain-less time comparisons safely (#43315)

2026-08-20 14:55:01 -07:00

unit_tests

fix(guest-tokens): reject result types that expand a chart to raw rows

2026-08-21 00:41:12 -07:00

__init__.py

…

conftest.py

fix: Bump pandas to 2.1.4 for python 3.12 (#34999)

2025-09-19 09:18:00 -07:00