Unverified50% confidenceFactExact time
OLS controls whether users can see specific tables or columns, and columns hidden by OLS do not expose even their field names.
1
Sources
50%
Confidence
Long-term
Relevance
10/5/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe Default-Deny principle ensures that users cannot see any data when no explicit authorization exists in the permission table, and newly added data tables or fields are invisible to all users by default.60% similarUnverifiedThe clipboard access prompt mechanism only targets active cross-app read behaviors and does not prevent clipboard managers that have been actively authorized by the user from silently recording in the background.59% similarUnverifiedPage content must be marked as untrusted; observation results can only provide data and cannot grant permissions, change approvals, or override user tasks, in order to defend against prompt injection attacks.58% similarUnverified在Agent代替用户操作敏感账户场景下，仅需读取数据的Agent其令牌Scope应被限定为只读权限58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/978144API
curl https://kongchang.com/api/v1/knowledge/claims/978144MCP
get_claim(id=978144)