Skip to content

v0.8.1

Choose a tag to compare

@SpaceShaman SpaceShaman released this 02 Aug 13:42
· 223 commits to master since this release

The latest version addresses a critical security issue and enhances the application's robustness. Here are the key changes:

Security Fixes

  • Fixed an SQL injection vulnerability by updating models.py to use parameterized queries.

New Features

  • Added support for parameterized queries in execute_sql in sql_utils.py.

Tests

  • Added tests in test_sql_injection.py to ensure SQL injection is prevented and to verify the integrity of the list filter.

In summary, this update enhances the security of the application by fixing an SQL injection vulnerability and ensuring proper testing for SQL injection prevention.

Features and Roadmap

  • Define table schema using Pydantic models
  • Basic CRUD operations
    • Save data to the database
    • Read data from the database
    • Update data in the database
    • Delete data from the database
  • Relationships between tables
    • One-to-many
      • Create a tables with a foreign key
      • Save data with a foreign key
      • Read data with a foreign key
      • Update data with a foreign key
      • Delete data with a foreign key
        • Cascade
        • Set null
        • Restrict
        • Set default
        • No action
    • One-to-one
    • Many-to-many
  • Unique constraints
  • Remove table
  • Read all data from the database
  • Filter data and retrieve multiple records
    • Equal
    • Not equal
    • Greater than
    • Greater than or equal
    • Less than
    • Less than or equal
    • Like (Pattern matching with % and _)
    • Not like (Pattern matching with % and _)
    • In (List of values)
    • Not in (List of values)
    • Between (Two values)
    • Not between (Two values)
  • Protect against SQL injection
  • Pagination
  • Order by
  • Update table schema
  • Custom primary key
  • Bulk operations (save, update, delete)
  • Migrations

Full Changelog: v0.8.0...v0.8.1