From ab1353819e3360cf3ee40fecdcbe060998cb5ff8 Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Sat, 3 Jan 2026 12:02:33 +0000
Subject: [PATCH] test: add regression test for RLS bypass via VALUES clause

This PR adds a unit test to verify that the RLS bypass vulnerability reported in Superset 4.1.2 has been fixed. The vulnerability involved using nested subqueries within a `VALUES` clause to evade table extraction and RLS enforcement. The fix was previously implemented by updating the `extract_tables_from_statement` function in `superset/sql/parse.py` to use `sqlglot.optimizer.scope.traverse_scope`.

This test ensures that tables within nested `VALUES` clauses are correctly extracted, preventing future regression.