issues_labels

Table actions

27 rows where labels_id = 2105906277

✎ View and edit SQL

This data as json, CSV (advanced)

Link labels_id issues_id
629524205,2105906277 security 2105906277 CSRF protection for /-/messages tool and writable canned queries 629524205
634112607,2105906277 security 2105906277 Ability to customize what happens when a view permission fails 634112607
636426530,2105906277 security 2105906277 Ability to set ds_actor cookie such that it expires 636426530
636722501,2105906277 security 2105906277 Having view-table permission but NOT view-database should still grant access to /db/table 636722501
637253789,2105906277 security 2105906277 /-/metadata and so on should respect view-instance permission 637253789
637363686,2105906277 security 2105906277 Mechanism for skipping CSRF checks on API posts 637363686
637966833,2105906277 security 2105906277 Log out mechanism for clearing ds_actor cookie 637966833
648421105,2105906277 security 2105906277 Consider dropping explicit CSRF protection entirely? 648421105
675724951,2105906277 security 2105906277 Security issue: read-only canned queries leak CSRF token in URL 675724951
725996507,2105906277 security 2105906277 Make it possible to download BLOB data from the Datasette UI 725996507
742041667,2105906277 security 2105906277 Make cascading permission checks available to plugins 742041667
764059235,2105906277 security 2105906277 More flexible CORS support in core, to encourage good security practices 764059235
778530523,2105906277 security 2105906277 /-/static should be excluded from auth and permission checks 778530523
806849424,2105906277 security 2105906277 Support SSL/TLS directly 806849424
811589344,2105906277 security 2105906277 Upgrade Python version used by official Datasette Docker image 811589344
849396758,2105906277 security 2105906277 Upgrade to Python 3.9.4 849396758
912464443,2105906277 security 2105906277 Security flaw, to be fixed in 0.56.1 and 0.57 912464443
912864936,2105906277 security 2105906277 Consider using CSP to protect against future XSS 912864936
915488244,2105906277 security 2105906277 Add section to "writing plugins" about security, e.g. avoiding XSS 915488244
920884085,2105906277 security 2105906277 Mechanism for plugins to exclude certain paths from CSRF checks 920884085
957310278,2105906277 security 2105906277 `default_allow_sql` setting (a re-imagining of the old `allow_sql` setting) 957310278
964322136,2105906277 security 2105906277 Manage /robots.txt in Datasette core, block robots by default 964322136
1121121305,2105906277 security 2105906277 Reconsider policy on blocking queries containing the string "pragma" 1121121305
1217014076,2105906277 security 2105906277 Security page in the documentation 1217014076
1469973742,2105906277 security 2105906277 Make sure CORS works for write APIs 1469973742
1486036269,2105906277 security 2105906277 Mechanism for supporting key rotation for DATASETTE_SECRET 1486036269
1886350562,2105906277 security 2105906277 Don't show foreign key links to tables the user cannot access 1886350562

Advanced export

JSON shape: default, array, newline-delimited, object

CSV options: 

CREATE TABLE [issues_labels] (
   [labels_id] INTEGER REFERENCES [labels]([id]),
   [issues_id] INTEGER REFERENCES [issues]([id]),
   PRIMARY KEY ([issues_id], [labels_id])
);
CREATE INDEX [idx_issues_labels_issues_id]
                ON [issues_labels] ([issues_id]);
CREATE INDEX [idx_issues_labels_labels_id]
                ON [issues_labels] ([labels_id]);