MetricFlow

hackadvisor

Task: Business analytics platform with Report Builder that passes metric alias names directly into Django ORM annotate() calls, placing them in double-quoted SQL identifiers. Solution: Inject double quote in alias to break out of identifier context, add subquery to SELECT clause to enumerate sqlite_master and extract flag from admin_secrets table.