3 ms·
Pretty interesting idea. Can someone edit the page and change one of the queries to drop table bobby
by soheil 5y ago
Pretty interesting idea. Can someone edit the page and change one of the queries to
drop table bobby
- rhacker 5y agoA fix for that would be to process the query in something like spark's interpreter as a middle man, which doesn't allow things like that and is query only.
- amcaskill 5y agoHaha In production, queries only run at 'build time', and we bake out static outputs to serve to your users. We mainly do this for performance reasons, but there isn't a connection to your db in the production outputs. Today, you might be able to issue a drop table command from the local dev server though, and we really should make sure there are guard rails for that...