Improve security of calling binary_to_term

See: https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/serialisation

Author: IvanIvanoff

lib/sanbase/dashboard/dashboard_query.ex

@@ -65,7 +65,7 @@ defmodule Sanbase.Dashboard.Query do
     compressed_rows
     |> Base.decode64!()
     |> :zlib.gunzip()
-    |> :erlang.binary_to_term()
+    |> Plug.Crypto.non_executable_binary_to_term([:safe])
   end
 
   def valid_sql?(args) do

lib/sanbase/queries/executor/result.ex

@@ -98,6 +98,6 @@ defmodule Sanbase.Queries.Executor.Result do
     compressed_rows
     |> Base.decode64!()
     |> :zlib.gunzip()
-    |> :erlang.binary_to_term()
+    |> Plug.Crypto.non_executable_binary_to_term([:safe])
   end
 end