GitHub user Nimishbansal-16 closed a discussion: [Security Concern] - DB 
Queries Visible for Embedded Charts

Hi Team,
I am embedding superset charts in my application ui using superset-sdk, where i 
have noticed that when chart is loading several api calls are made to the 
superset server, one of which is to fetch the actual data of the chart, the 
output of this network call is also **displaying the query** that was used to 
create this chart/dataset. This exposes my underlying database structure which 
is a security concern for me, is there anyway we can **disable/hide this**?

Superset version: apache-superset==4.0.0

Api endpoint - https://{superset_domain}/api/v1/chart/data

Sample output - 
![WhatsApp Image 2025-05-16 at 08 38 
02](https://github.com/user-attachments/assets/13d0434b-5963-4de5-8876-09e5dae60e4c)

Thanks in advance.



GitHub link: https://github.com/apache/superset/discussions/33460

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: 
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to