antonycourtney / tad

A desktop application for viewing and analyzing tabular data
http://tadviewer.com
MIT License
3.18k stars 118 forks source link

Tad injects file name directly into SQL statement #260

Open flying-sheep opened 7 months ago

flying-sheep commented 7 months ago

E.g. a file called all.parquet will crash it.