superset2

mirror of https://github.com/apache/superset.git synced 2026-07-20 05:36:00 +00:00

Files

Amin Ghadersohi f48ec58abe fix(database): mask SSH tunnel credentials explicitly on read paths

The SSH tunnel credential fields (password, private_key,
private_key_password) are masked on the write paths (POST/PUT) via
mask_password_info(), but the read paths (GET /<pk> and
GET /<pk>/connection) attached SSHTunnel.data directly, relying solely on
the model property to mask. Apply mask_password_info() on the read paths too
so the masking contract is enforced consistently at the API boundary and is
robust to future changes in SSHTunnel.data.

Adds an integration test asserting the three credential fields are masked on
both read paths while the stored values remain intact.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-22 16:58:26 -07:00

common

refactor: update Connection.execute() to use queries with text() (#40277 )

2026-06-22 15:36:15 -07:00

consts

refactor(example_data): replace the way the birth_names data is loaded to DB (#18060 )

2022-01-18 23:21:04 +02:00

example_data

refactor: update Connection.execute() to use queries with text() (#40277 )

2026-06-22 15:36:15 -07:00

fixtures

chore: enforce more ruff rules (#31447 )