Fix SQL injection: validate query tables against TAP_SCHEMA whitelist#13

Open

bjfultn wants to merge 5 commits intodevelopfrom

security/table-validation

Commits on Mar 5, 2026

Fix SQL injection: validate query tables against TAP_SCHEMA whitelist

bjfultn
and
claude
committed
Fix ORDER BY columns being misidentified as table names

bjfultn
and
claude
committed

Commits on Mar 7, 2026

Fix UnboundLocalError in datadictionary.py placeholder detection

bjfultn
and
claude
committed

Commits on Mar 10, 2026

Exclude propfilter internal tables from table validation

bjfultn
and
claude
committed

Commits on Mar 11, 2026

Also exclude internal tables from tapquery.py validation

bjfultn
and
claude
committed