feat(security): exclude hidden/masked columns from create and update payloads

2026-10-02 03:22:09 +00:00 · 2026-09-30 23:48:09 +02:00
parent a65ca5f5ce
commit b35399fdfa
13 changed files with 456 additions and 4 deletions
@@ -596,6 +596,9 @@ func (h *Handler) executeUpdate(ctx context.Context, schema, entity, id string,
 		Data:      updates,
 		Tx:        h.db,
 	}
+	if err := h.hooks.Execute(BeforeHandle, hookCtx); err != nil {
+		return nil, err
+	}

 	var updateResult interface{}
 	err = h.runInTx(ctx, hookCtx, func(tx common.Database) error {