Possible to select a column that is not available #124
Labels
bug
Something isn't working
good first issue
Good for newcomers
help wanted
Extra attention is needed
This is closely related to #123 and should be solved together.
It is possible to forge an URL with a column name that exist but is not available. The column will correctly not show the injected column, but the table will incorrectly show the column. Effectively giving access to user to things he was not supposed to see.
The text was updated successfully, but these errors were encountered: