fix: remove unsafe-eval CSP (ENG-3437) - #56

Draft

fwereade wants to merge 55 commits into

stacklet/integrationfrom

fwereade/fix/unsafe-eval

Commits on Feb 29, 2024

initialize with non empty db
kapilt
authored and
thisisshi
committed
41a3005
redash schema namespace
kapilt
authored and
thisisshi
committed
cbcd8c5
address review feedback
kapilt
authored and
thisisshi
committed
d04f32e
redo empty db detection for just redash tables
kapilt
authored and
thisisshi
committed
56458a1
database - fix is_db_empty len check
Wayne Witzel III
authored and
thisisshi
committed
6f4d540
database - create schema if needed and use in migrations
Wayne Witzel III
authored and
thisisshi
committed
80d10ca
make sure create superuser command does not crash when user exists (#7)
cguardia
authored and
thisisshi
committed
e983458
db - respect schema for all queries and migrations
Wayne Witzel III
authored and
thisisshi
committed
aa0ebb0
client - fix js local/locale call
Wayne Witzel III
authored and
thisisshi
committed
ed3aafc
feat: add IAM auth support for PostgreSQL data source (#11)
Wayne Witzel III
authored and
thisisshi
committed
c92dc0c
fix: use SQLALCHEMY_DATABASE_SCHEMA for api_keys query if set (#12)
Wayne Witzel III
authored and
thisisshi
committed
3f8401d
Use SQLAlchemy 1.3 way to update URL, and use get_env_db method. (#13)
howbazaar
authored and
thisisshi
committed
e095353
feat: add cors so embedded dashboards can work cross domain (#14)
Wayne Witzel III
authored and
thisisshi
committed
0504971
fix: local => locale (#16)
Wayne Witzel III
authored and
thisisshi
committed
b861b8e

Commits on Mar 1, 2024

fix: create after_request event handler for cors (#18)
Wayne Witzel III
authored and
thisisshi
committed
f782cec
Revert "fix: local => locale (#16)" (#19)
Wayne Witzel III
authored and
thisisshi
committed
e4235cc
feat: make jwt user claim key configurable (PLATFORM-2074)
johnsca
authored and
thisisshi
committed
e7cf997
Fix JWT validation when no "aud" claim expected
johnsca
authored and
thisisshi
committed
8e64516
Add support for validating the client ID
johnsca
authored and
thisisshi
committed
dab0455
chore: add codeowners file
tvansteenburgh
authored and
thisisshi
committed
21994ba
feat: support external login redirection URL (PLATFORM-2411)
johnsca
authored and
thisisshi
committed
974a0e9
feat: reflect stacklet admin in redash (PLATFORM-2545)
johnsca
authored and
thisisshi
committed
dbccd94
fix: compat with Athena queries by locking PyAthena to a max version
SaMnCo
authored and
thisisshi
committed
7d8c8cd
fix: surface invalid token errors (PLATFORM-2679)
johnsca
authored and
thisisshi
committed
3a7e8b2
fix: find identity from multiple fields in token (PLATFORM-2688)
johnsca
authored and
thisisshi
committed
6f388aa
Return identity instead of mutating payload
johnsca
authored and
thisisshi
committed
3e8fe39
fix: handle expired tokens properly
johnsca
authored and
thisisshi
committed
b53632d
chore: add segment tracking code (PLATFORM-2626)
johnsca
authored and
thisisshi
committed
400071d
fix: fix js error when query schedule includes a time (ENG-859) (#34)
johnsca
authored and
thisisshi
committed
a196446
chore: change styling to match stacklet (ENG-966) (#37)
johnsca
authored and
thisisshi
committed
b23e9c6
feat: replace default auto colors by range of Stacklet Colors (#39)
SaMnCo
authored and
thisisshi
committed
48e477b
fix: add a to to the server side of gunicorn
Samuel Cozannet
authored and
thisisshi
committed
9f252ea
chore: improve debugging for non-running query refresh job (#42)
johnsca
authored and
thisisshi
committed
8a80dc3
feat: health check for scheduler (ENG-2154) (#43)
johnsca
authored and
thisisshi
committed
46c91be
fix: handle existing scheduler more gracefully (ENG-2223) (#44)
johnsca
authored and
thisisshi
committed
9cbe6de
feat: add db_role to Users and QueryResults models (ENG-2473, ENG-2475) (#45)
johnsca
authored and
thisisshi
committed
f1206f6
feat: add RLS policy for query results table (ENG-2477) (#46)
johnsca
authored and
thisisshi
committed
4eb7257
feat: filter query results by user db_role (ENG-2477,ENG-2476,ENG-2478) (#47)
johnsca
authored and
thisisshi
committed
ce91ba9
feat: use per-user db role for query exec (ENG-2474) (#48)
johnsca
authored and
thisisshi
committed
0c4bc76
chore: RIOT double-install cleanup (ENG-2706) (#49)
tvansteenburgh
authored and
thisisshi
committed
1da0268
chore(deps): update dompurify (#52)
authored and
thisisshi
committed
4954964
fix: handle missing db_role attribute for ApiUser (ENG-3212) (#54)
johnsca
authored and
thisisshi
committed
196f4bf
chore: merge master
thisisshi
committed
a54e63d
remove underscore
thisisshi
committed
b6764f4
update yarn.lock
thisisshi
committed
22e6bd5
fix webpack
thisisshi
committed
12c1cb9
missed a merge
thisisshi
committed
ddcea3f
merge heads
thisisshi
committed
fdb5918
fix multiple heads
thisisshi
committed
d76e724
fix command
thisisshi
committed
314a79b

Commits on May 26, 2024

fix: remove unsafe-eval CSP (ENG-3437)
fwereade
committed
39cdd33
Revert "fix: remove unsafe-eval CSP (ENG-3437)"
fwereade
committed
efa2c3b
fix: remove unsafe-eval CSP (ENG-3437)
fwereade
committed
6fbf474

Commits on May 28, 2024

try strict plotly
fwereade
committed
eab7c61
experiment
fwereade
committed
1dc41ae