Commit Graph

229 Commits

Author SHA1 Message Date
John Bodley
68bfcefb27 [flask-appbuilder] Bumping version to 1.10.0 (#4603) 2018-04-02 21:35:10 -07:00
John Bodley
b3442a7b53
[cli] Deprecating gunicorn/flower dependencies (#4451) 2018-03-30 09:28:16 -07:00
Maxime Beauchemin
b24a6fd4b5
Fix setup.py, comma makes download_url a tuple (#4676) 2018-03-23 11:21:19 -07:00
John Bodley
3fbadd68a4 [code-climate] Deprecating Code Climate from JavaScript tests 2018-03-08 22:40:08 -08:00
Maxime Beauchemin
d817b8ddbb
Setting up compression using flask-compress (#4543) 2018-03-06 21:19:29 -08:00
John Bodley
b01a9bba1f [setup] Fixing URLs 2018-03-05 13:06:08 -08:00
timifasubaa
404e2d552a fixes to csv - hive upload (#4488) 2018-02-27 22:13:06 -08:00
John Bodley
d57a37e341 [flake8] Adding flake8-coding (#4477) 2018-02-25 15:06:11 -08:00
John Bodley
e112e4417c [flake8] Adding future-import check (#4476) 2018-02-23 16:42:09 -08:00
Maxime Beauchemin
5c35a2d210
A collection of bug fixes (#4444) 2018-02-20 14:41:35 -08:00
David Dworken
4ff17ffc8d Fix 4 security vulnerabilities (#4390)
* Switched yaml.load to yaml.safe_load to prevent code execution via crafted yaml files

Python's yaml.laod can lead to code execution via crafted yaml files such as:

```
code_exec: !!python/object/apply:subprocess.check_output ['ls']
```

* Fixed XSS via bleach

It was possible to get an XSS via the markdown library via simply setting a description containing arbitary HTML tags.
It was also possible to create links that went to the `javascript:` link handler (eg `[example](javascript:alert(0)`)
Using bleach to sanitize it solves both of these.

* Added XFO header by default to prevent clickjacking attacks

Note that with this application clickjacking can be relatively severe via the SQLLab functionality
which allows executing arbitary SQL.

* Added justification for dangerouslySetInnerHTML

* Fixed linting errors

* Fixed linting errors
2018-02-09 14:33:29 -08:00
Maxime Beauchemin
0480fa0121
Bump pydruid to 0.4.1 (#4377) 2018-02-07 16:45:44 -08:00
Maxime Beauchemin
803738436e
Bump python dependencies (#4341)
* Bump python dependencies

* Fix conflict
2018-02-07 14:32:29 -08:00
Maxime Beauchemin
d41418eaa0
Bump pyrdruid to 0.4.0 (#4325) 2018-02-03 19:48:38 -08:00
Riccardo Magliocchetti
1b06140bde Bump sqlalchemy to 1.2.2 (#4299)
* Bump sqlalchemy to 1.2.2

Fix #4196

* Bump sqlalchemy-utils to 0.32.21
2018-01-28 09:32:41 -08:00
Maxime Beauchemin
718230cdf2
Bump flower==0.9.2 (#4263) 2018-01-23 10:15:10 -08:00
John Bodley
d57012067b [FAB] configuring updating of permissions (#4172) 2018-01-08 14:39:18 -08:00
Maxime Beauchemin
45686a1af6
Multi layers DECK.GL visualization (#4096)
* Multi layers DECK.GL viz

* Fix tests

* rebasing

* Fix error handling in chartActions

* Addressing comments
2017-12-26 10:47:29 -08:00
Maxime Beauchemin
e4903e6dc6
[geo] add support for deck.gl's path layer (#4067)
* [geo] add support for deck.gl's path layer

Works with json and polyline data.

* Lint
2017-12-19 12:38:03 -08:00
Maxime Beauchemin
ec752b1378
[geo] provide more flexible Spatial controls (#4032)
Before this PR the only way to query lat/long is in the shape of 2
columns that contains lat and long.

Now we're adding 2 more options:
* a single column that has lat and long with a delimiter in between
* support for geohashes - geohashes are cool
2017-12-15 11:47:27 -08:00
Maxime Beauchemin
23c834f04e
Fix the pypi build (#4047) 2017-12-12 18:12:26 -08:00
rumbin
e98a1c3537 asciifying http header for csv download; fixes #3952 (#3975)
* asciifying http header for csv download; fixes #3952

* fixed order of imports and added unidecode to requirements in setup.py
2017-12-05 12:04:58 -08:00
fabianmenges
72627b1761 Adding YAML Import-Export for Datasources to CLI (#3978)
* Adding import and export for databases

* Linting
2017-12-05 11:14:52 -08:00
John Bodley
ac57780607 [flake8] Resolving Q??? errors (#3847) 2017-11-13 21:06:51 -08:00
王洁玉
7fce8eab3a Update setup.py (#3510) 2017-11-11 21:51:53 -08:00
John Bodley
ba96984048 [flake8] Resolving E3?? errors (#3814) 2017-11-10 17:52:34 -08:00
Maxime Beauchemin
591e5ec32e Bump celery to 4.1.0 (#3831)
* Bump celery to 4.1.0

* Also bumping boto3 to allow for celery 4 on SQS
2017-11-10 16:28:56 -08:00
John Bodley
1ea4521d0c [flake8] Resolving E7?? errors (#3816) 2017-11-09 20:23:59 -08:00
John Bodley
e2bca47421 [flake8] Resolve I??? errors (#3797) 2017-11-07 20:23:40 -08:00
Riccardo Magliocchetti
8773e32cd6 setup: bump pandas to 0.20.3 (#3506) 2017-09-27 19:50:06 -07:00
timifasubaa
d7fc364ff4 Fix idna requirement (#3497)
There is often conflicting versions of idna. This fixes is to 2.5.
2017-09-19 21:30:18 -07:00
Riccardo Magliocchetti
3dfdde130a setup: Bump sqlalchemy-utils to 0.32.16 (#3405)
Now sqlalchemy-utils will make explicit that we are trying
decoding the secret with the wrong key instead of a generic
UnicodeDecodeError.

Fix #2600
2017-09-01 08:30:48 -07:00
Maxime Beauchemin
c5b1eb7f5b Bump fab to 1.9.4 (#3364)
Important bug/security fixes detailed here:
https://github.com/dpgaspar/Flask-AppBuilder/blob/master/docs/versions.rst
2017-08-24 08:08:29 -07:00
Fokko Driesprong
6da68ab271 Explicitly add Flask as dependancy (#3252) 2017-08-09 09:09:02 -07:00
Maxime Beauchemin
b888802e05 [sqllab] improve Hive support (#3187)
* [sqllab] improve Hive support

* Fix "Transport not open" bug
* Getting progress bar to show
* Bump pyhive to 0.4.0
* Getting [Track Job] button to show

* Fix testzz
2017-07-27 14:00:19 -07:00
Riccardo Magliocchetti
fb866a937b Bump cryptography to 1.9 (#3065)
As 1.7.2 doesn't compile here with openssl 1.1.0f
2017-07-26 14:11:11 -07:00
Maxime Beauchemin
5344a80535 Bumping flask-appbuilder to 1.9.1 2017-06-21 11:32:41 -07:00
Maxime Beauchemin
0b09a74d37 Downgrading celery to 3.1.25
https://github.com/celery/celery/issues/3932 is a blocker for Airbnb
2017-06-21 11:29:22 -07:00
Maxime Beauchemin
53dead9c29 Revert "Bumping FAB to 1.9.1"
This reverts commit f64e2ba7d5.
2017-06-20 22:25:58 -07:00
Maxime Beauchemin
f64e2ba7d5 Bumping FAB to 1.9.1 2017-06-20 21:52:16 -07:00
Maxime Beauchemin
06fcaa3095 Stabilizing Celery / SQL Lab (#2981)
* upgrade celery to 4.0.2
* using Redis for unit tests (sqla broker not supported in Celery 4)
* Setting Celery's soft_time_limit based on `SQLLAB_ASYNC_TIME_LIMIT_SEC` config
* Better error handling in async tasks
* Better statsd logging in async tasks
* show [pending/running] query status in Results tab
* systematically using sqla NullPool on worker (async) to limit number
  of database connections
2017-06-20 13:55:03 -07:00
Maxime Beauchemin
712297480c [CLI] adding 'superset flower' command (flower is a UI for Celery) (#2963)
* [CLI] adding 'superset flower' command (flower is a UI for Celery)

* Addressing comments
2017-06-15 17:02:17 -07:00
Maxime Beauchemin
987cb9978d [hotfix] bumping pandas version to 0.20.2 2017-06-13 00:03:33 +00:00
Maxime Beauchemin
1eff48facb Bumping some dependencies (#2945)
Most notably Flask AppBuilder to 1.9.0
2017-06-12 13:21:14 -07:00
Maxime Beauchemin
38375be5c3 Fix issues around % signs and Presto (#2755)
* Fix issues around % signs and Presto

* Fix mysql
2017-05-12 09:45:33 -07:00
Maxime Beauchemin
68802989bc Pinning cryptography lib to 1.7.2 2017-04-26 10:32:25 -07:00
Riccardo Magliocchetti
412634cb57 Add missing flask-wtf dependency (#2586) 2017-04-11 12:25:54 -07:00
Maxime Beauchemin
5e4fca4ea4 Bumping a set of Python libraries to the latest release (#2575)
* Bumping a set of Python libraries to the latest release

* fixing flask-sqlalchemy==2.0
2017-04-10 15:37:30 -07:00
Maxime Beauchemin
1f8e48b374 [sqllab] assign types for visualize flow (#2458)
* [sqllab] assign types for visualize flow

Somehow when using the visualize flow, the types were not
assigned at all, creating some bugs downstream. This PR attempts to get
the information required based on what pandas is knows and the types in
the data itself.

* Fixing tests

* Fixing tests

* Fixing more tests

* Fixing the last py3 tests
2017-03-24 09:23:51 -07:00
Maxime Beauchemin
8042ac876e [explore] improved filters (#2330)
* Support more filter operators

* more filter operators [>, <, >=, <=, ==, !=, LIKE]
* Fix need to escape/double `%` in LIKE clauses
* spinner while loading values when changing column
* datasource config elements to allow to applying predicates when
  fetching filter values
* refactor

* Removing doubling parens

* rebasing

* Merging migrations
2017-03-20 21:10:59 -07:00
Maxime Beauchemin
f5e3d0cc02 [hotfix] incompatible diamond flask-sqlalchemy version 2017-02-16 23:16:35 -08:00
Maxime Beauchemin
579e58206e Bumping up some of the python lib deps 2017-02-16 22:05:29 -08:00
Benjamin Yolken
1e94498d9d Add initial implementation of S3Cache 2017-02-03 13:32:23 -08:00
Wyndham Blanton
1b8c3f420a avoid py3 error in setup.py (#2030)
print("GIT SHA: " + GIT_SHA)
TypeError: Can't convert 'NoneType' object to str implicitly
2017-01-24 11:31:05 -08:00
Maxime Beauchemin
0ce7fc18a8 Adding a way to see the git SHA from the website (#1956)
* Adding a way to see the git SHA from the website

* Fixing py3 bug
2017-01-12 12:32:06 -08:00
Dongkyu Hwangbo
3e6f90cf72 Upgrading pydruid version and adopt 'merge' flag during refresh_druid operation (#1879)
* Initial

* rewrite some line to make it short and setting merge variable temporarily

* rewrite commit author

* add emitted attribute

* Fix typo

* fix test error

* fix typo

* test added
2016-12-27 14:27:55 -08:00
Maxime Beauchemin
15b67b2c6c [WiP] rename project from Caravel to Superset (#1576)
* Change in files

* Renamin files and folders

* cleaning up a single piece of lint

* Removing boat picture from docs

* add superset word mark

* Update rename note in docs

* Fixing images

* Pinning datatables

* Fixing issues with mapbox-gl

* Forgot to rename one file

* Linting

* v0.13.0

* adding pyyaml to dev-reqs
2016-11-09 23:08:22 -08:00
Riccardo Magliocchetti
bad7676414 Bump cryptography dependency to 1.5.3 (#1569)
As the 1.5 release branch builds with OpenSSL 1.1.x
2016-11-09 08:41:57 -08:00
vera-liu
2432c3155a Associate version to entry files (#1060)
* Associate version to entry files

* Modified path joins for configs

* Made changes based on comments
2016-09-15 17:20:18 -07:00
Maxime Beauchemin
38b8db8051 SQL Lab - A multi-tab SQL editor (#514)
* Carapal react mockup

This is really just a mock up written in React to try different
components. It could become scaffolding to build a prototype, or not.

* Merging in Alanna's theme tweaks for SQL lab

* Tweak the display of the alert message in navbar

* Sketching the middleware refresh for Queries

* Adjustments

* Implement timer sync.

* CTAS

* Refactor the queries to be stored as a dict. (#994)

* Download csv endpoint. (#992)

* CSV download engdpoint.

* Use lower case booleans.

* Replcate loop with the object lookup by key.

* First changes for the sync

* Address comments

* Fix query deletions. Update only the queries from the store.

* Sync queries using tmp_id.

* simplify

* Fix the tests in the carapal. (#1023)

* Sync queries using tmp_id.

* Fix the unit tests

* Bux fixes. Pass 2.

* Tweakin' & linting

* Adding alpha label to the SQL LAb navbar entry

* Fixing the python unit tests
2016-08-29 21:55:31 -07:00
Maxime Beauchemin
6b5d6b4156 [typo] in setup.py 2016-08-15 23:38:05 -07:00
Maxime Beauchemin
4e1af9a2ca Adding codeclimate-test-reporter to dev-reqs.txt 2016-08-15 23:30:51 -07:00
Maxime Beauchemin
a8131dda7a Attempting coverage integration with code climate 2016-08-14 17:08:11 -07:00
vimxiang
8a69235220 fix development env req (#761)
when i install for development, get an error:
error: Flask-SQLAlchemy 2.1 is installed but Flask-SQLAlchemy==2.0 is required by set(['flask-appbuilder'])
2016-07-13 23:29:41 -04:00
Maxime Beauchemin
9d7c05a015 [hotfix] fix py3 compatibility broken by basestring 2016-07-11 17:36:12 -04:00
Maxime Beauchemin
6a34b729e9 Adapting Babel to new FAB version, regenerating translations (#684) 2016-06-27 20:10:40 -07:00
Maxime Beauchemin
d71a67cdad Bumping FAB and cryptography to current version (#647) 2016-06-20 15:31:15 -07:00
Maxime Beauchemin
d90a2c861a Pinning all dependencies to specific versions (#627) 2016-06-15 09:29:37 -07:00
Maxime Beauchemin
9ed8c32f76 Cranking up FAB to latest (1.7.1) version (#609) 2016-06-13 09:25:22 -07:00
Maxime Beauchemin
c490138afe Fixing json issues (#602) 2016-06-11 20:39:25 -07:00
Maxime Beauchemin
60ed3e4050 TOX / Travis build matrix (#593)
* Building on many dbs

* Fixing some translation related error msg
2016-06-09 18:05:58 -07:00
Riccardo Magliocchetti
cdb573e793 caravel: add missing test requirements in setup.py (#582) 2016-06-08 13:50:43 -07:00
Giacomo Tagliabue
5f005d67e3 Add CORS support (#478)
* Add optional CORS

* make CORS an extra dependency

* add documentation
2016-06-02 12:34:36 -07:00
Maxime Beauchemin
7d27692828 [hotfix] forcing newer pydruid version 2016-05-24 12:35:55 -07:00
Maxime Beauchemin
57990bfd83 Implementing druid's regex filters (#501)
* Implementing druid's regex filters

* Debugging

* Debuggin'
2016-05-23 13:06:35 -07:00
Maxime Beauchemin
0fcab30652 More translation instrumentation and some french to test (#502) 2016-05-23 11:46:33 -07:00
Maxime Beauchemin
88c9516e20 Getting started on translations (#423) 2016-05-02 10:50:23 -07:00
Maxime Beauchemin
01a8c96820 Specifying python versions supported in setup.py (#382)
* Specifying python versions supported in setup.py

* Fixing py3
2016-04-20 12:27:17 -07:00
Maxime Beauchemin
badcd8bfa1 Storing version number in only one place (#362) 2016-04-17 08:20:11 -07:00
Maxime Beauchemin
2d420eee25 v0.8.8 2016-04-14 21:25:47 -07:00
Maxime Beauchemin
ffdae19312 v0.8.7 2016-04-13 22:45:50 -07:00
Maxime Beauchemin
0a94b36d3d Adding version subcommand to CLI (#329) 2016-04-13 17:27:20 -07:00
Maxime Beauchemin
c5dead4791 v0.8.6 2016-04-07 14:26:28 -07:00
Maxime Beauchemin
718de6cd50 v0.8.5 2016-04-01 13:30:12 -07:00
Maxime Beauchemin
ab92e7a94d Pin pandas, remove numpy 2016-04-01 08:04:44 -07:00
Kim Pham
f659caa06b Fix an installation bug. 2016-03-30 19:08:38 -07:00
Maxime Beauchemin
8e27099866 Fixing the tests for py3 2016-03-29 10:02:15 -07:00
Maxime Beauchemin
619d35878f [dashed->caravel] Replace in files 2016-03-28 22:01:21 -07:00
Maxime Beauchemin
301dce2dd1 Using setup.py nosetests to run tests 2016-03-27 19:15:21 -07:00
Maxime Beauchemin
c9203554e7 a welcome page 2016-03-25 18:08:33 -07:00
Maxime Beauchemin
21d1c0a1b5 0.8.4 2016-03-23 22:26:16 -07:00
Maxime Beauchemin
d5487c6b25 0.8.3 2016-03-23 14:11:37 -07:00
Maxime Beauchemin
a244f3aafb Fixing build issues with preventive rm /Users/maxime_beauchemin/.npm/*.lock 2016-03-23 14:11:37 -07:00
Maxime Beauchemin
d8192eca0a Introducing a caching layer 2016-03-22 18:11:10 -07:00
Maxime Beauchemin
e17d78e196 Cranking up version numbers 2016-03-19 21:33:39 -07:00
Maxime Beauchemin
be6b2fe556 [panoramix] -> [dashed] 2016-03-17 23:44:58 -07:00
Maxime Beauchemin
e2cd14d320 Fixing the python and js packaging 2016-03-10 01:35:20 -05:00
Maxime Beauchemin
486fb8bfb4 [hotfix] fixing the examples 2016-03-03 22:30:22 -05:00
Maxime Beauchemin
4fe89a3811 Pinning parsedatetime to 2.0 2016-03-01 14:23:54 -08:00
Maxime Beauchemin
88b8f73489 Not specifying flask-login version, letting flask-appbuilder do it 2016-02-11 12:54:08 -08:00
Maxime Beauchemin
e02702d320 Pinning appbuilder to 1.6 2016-02-11 10:59:49 -08:00
Maxime Beauchemin
012a651586 v0.7.0 2016-01-23 07:16:45 -08:00
Maxime Beauchemin
a38a8d476e Loading another example amazing dash 2016-01-13 17:05:11 -08:00
Maxime Beauchemin
08fd4d1258 0.6.1 2015-12-12 09:44:56 -08:00
Maxime Beauchemin
a4065e4be6 v0.6.0 2015-12-10 17:17:28 -08:00
Maxime Beauchemin
85227912b3 Encrypting the passwords out of connection strings 2015-11-21 12:35:49 -08:00
Maxime Beauchemin
5057593ec9 v0.5.3 2015-10-24 08:02:16 -07:00
Maxime Beauchemin
ec805d3bd8 pinning flask-sqlalchemy==2.0 2015-10-24 07:54:03 -07:00
Maxime Beauchemin
774f205d24 pinning sqla 2015-10-24 07:49:46 -07:00
Maxime Beauchemin
c07770e52a v0.5.2 2015-10-23 18:06:01 -07:00
Maxime Beauchemin
a58d184711 Removing references to basestring 2015-10-20 13:00:42 -07:00
Maxime Beauchemin
1ffb9a0fc6 Reverting to old deps notation as server is on 2.7.3 2015-10-20 12:42:19 -07:00
Maxime Beauchemin
2ddebc1a4c Pinning flask version 2015-10-20 12:21:44 -07:00
Maxime Beauchemin
bdd5b08787 Cleaning up reqs versions 2015-10-19 23:34:48 -07:00
Maxime Beauchemin
37629fb548 v0.5.1 2015-10-13 08:05:40 -07:00
Maxime Beauchemin
51d7225f06 v0.5.0 2015-10-12 18:09:37 -07:00
Maxime Beauchemin
f0d84f634f Forcing pandas versino 2015-10-11 21:24:26 -07:00
Maxime Beauchemin
db272f831b Adding markdown dep 2015-09-28 12:46:05 -07:00
Maxime Beauchemin
e473a828e7 Adding flask-testing to list of deps 2015-09-28 12:38:44 -07:00
Maxime Beauchemin
50adfdc662 Explicit flask dependency 2015-09-28 12:28:58 -07:00
Maxime Beauchemin
e64367149e v0.4.0 2015-09-26 21:39:45 -07:00
Maxime Beauchemin
63d55c9f93 Polish 2015-09-23 16:43:55 -07:00
Maxime Beauchemin
c1f28a3e74 Merge pull request #25 from mistercrunch/dash
Adding basic dashboarding support!
2015-09-18 13:42:02 -07:00
Maxime Beauchemin
f6753afa75 Panoramix v1 dashboards is up 2015-09-17 18:06:47 -07:00
Maxime Beauchemin
95b080160f Pinning flask-login 2015-09-12 23:27:06 -07:00
Maxime Beauchemin
36351918c9 Dashboards 2015-09-12 23:25:43 -07:00
Maxime Beauchemin
5f20a080f4 Setting up alembic 2015-09-11 15:32:42 -07:00
Maxime Beauchemin
c95c2522ab v0.2.1 2015-09-05 15:08:38 -07:00
Maxime Beauchemin
efc54e0f65 Preparing pypi package 2015-09-05 13:37:55 -07:00