From a395256c8c10f19bb006e0fce8f5eddd2b645757 Mon Sep 17 00:00:00 2001 From: Simon Willison Date: Thu, 7 Mar 2024 00:03:20 -0500 Subject: [PATCH] Allow-list select * from pragma_table_list() Refs https://github.com/simonw/datasette/issues/2104#issuecomment-1982352475 --- datasette/utils/__init__.py | 1 + 1 file changed, 1 insertion(+) diff --git a/datasette/utils/__init__.py b/datasette/utils/__init__.py index 4adfcc8d..9c0bbfa3 100644 --- a/datasette/utils/__init__.py +++ b/datasette/utils/__init__.py @@ -246,6 +246,7 @@ allowed_pragmas = ( "schema_version", "table_info", "table_xinfo", + "table_list", ) disallawed_sql_res = [ (