forked from apache/superset
-
Notifications
You must be signed in to change notification settings - Fork 160
Open
Labels
bugSomething isn't workingSomething isn't working
Description
Description
In SQL Lab, query results containing strings with angle brackets (< >) are being hidden from display, making it appear as if the data is missing when it actually exists.
Current Behavior
- Query returns results with strings containing
<or> - These values don't display in the results grid
- Appears as empty cells or missing data
- Other string values display correctly
Expected Behavior
- All string values should display correctly
- Strings with angle brackets visible in results
- No data hidden from user
- Results accurately reflect query output
Steps to Reproduce
- Open SQL Lab
- Execute query returning strings with angle brackets
- Example:
SELECT '<div>test</div>' as html_string - Check results grid
- Observe that value is not displayed
Proposed Solution
This is likely a frontend sanitization issue where HTML-like strings are being filtered out for security. The fix should:
- Properly escape angle brackets for display
- Ensure strings are shown as text, not interpreted as HTML
- Maintain security while displaying all data
Technical Context
- Component: SQL Lab results grid
- Frontend rendering logic
- HTML sanitization/escaping
- React component displaying query results
Download https://cap.so/ to record your screen (use Studio mode). Export as an mp4, and drag and drop into an issue comment below.
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working