Security fixes - #18

Open

Romsik788 wants to merge 3 commits into

mainfrom

Commits on Sep 8, 2026

fix: reject raw SQL filters and require list permission in get_filtered_ids
Romsik788
committed
5d42894
fix: require edit permission and limit update-field to translation columns
Romsik788
committed
40678b5

Commits on Sep 9, 2026

fix: drop backendOnly and undeclared columns from the update-field response
Romsik788
committed
bc1435c