Hacker News new | ask | show | jobs
by Temporary_31337 848 days ago
What’s different between an internal dashboard and a customer facing one? I am mostly asking what specifically is missing from Apache Superset as we are seriously looking into it… for internal use
1 comments

I have some recollection about filters defined by jinja macros opening up for SQL injections.
And this would be fine if you could lock down arbitrary input in e.g. dropdowns, but it was still possible to input arbitrary strings even in a dropdown because of the choice of widget.