Query Console

Secure, mountable Rails SQL console with read-only enforcement and optional DML support

A Rails engine that provides a secure, mountable web interface for running SQL queries against your application's database. Read-only by default with optional DML support.

What you get

• 🔴 CRITICAL: Subquery DML Bypass - SELECT * FROM (DELETE FROM users) AS x bypassed all security
• 🟠 HIGH: Missing server-side DML confirmation - curl requests bypassed user consent dialog
• 🟠 HIGH: Audit trail misclassification - subquery DML logged incorrectly
• 🟡 LOW: History panel XSS vulnerability

Installing it

# Gemfile
gem "query_console"

Details

12 stars on GitHub · MIT licensed · maintained by JohnsonGnanasekar. Source: https://github.com/JohnsonGnanasekar/query_console