The CREATE statement is already on the EXPLORER_SQL_BLACKLIST, but SQLparse package treats 'CREATE OR REPLACE' as a different token, so the check for blacklisted commands in explorer/utils.pl:35 does not detect it.
Just adding 'CREATE OR REPLACE' to the blacklist would be sufficient.
The CREATE statement is already on the EXPLORER_SQL_BLACKLIST, but SQLparse package treats 'CREATE OR REPLACE' as a different token, so the check for blacklisted commands in
explorer/utils.pl:35does not detect it.Just adding 'CREATE OR REPLACE' to the blacklist would be sufficient.