rusackas opened a new pull request, #43398: URL: https://github.com/apache/superset/pull/43398
### SUMMARY - SQL Lab no longer auto-executes a query from a URL/querystring or a stored permalink's `autorun` flag; auto-run now only happens from same-origin in-app navigation state. - Color-breakpoint RGB channel values are now coerced to numbers before being interpolated into a styled-component template. - `allowHTML` now defaults to `false` across the result-grid rendering surfaces (`FilterableTable`, SQL Lab result view, dataset preview, the "View as table" drawer) rather than `true`. - The client-side "Current View" CSV export now escapes formula-triggering prefixes, matching the server-side export path. - The HTML-detection heuristic used before treating a string as markup now recognizes several previously-missed tag families and inspects the parsed document's `<head>` as well as its `<body>`. - The ag-grid table plugin's numeric-cell horizontal-alignment option is now restricted to a fixed set of values before being interpolated into a stylesheet. ### TESTING INSTRUCTIONS `npm test` in `superset-frontend/` for the affected files — new/extended tests per change, each demonstrating the previous gap and passing once fixed. ### ADDITIONAL INFORMATION - [ ] Has associated issue: - [ ] Required feature flags: - [ ] Changes UI - [ ] Includes DB Migration - [ ] Introduces new feature or API - [ ] Removes existing feature or API -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
