Have a admin setting for disallowed tables or column names

[brendanheywood]

The idea being this can be forced in config.php and you can prevent a report from exporting things such as the user table's password hashes, private keys, user tokens, web service tokens etc

I think this can be as simple as a list of tokens which cannot appear in the sql but that needs be validated.

[timhunt]

Reasonable idea. Pull requests welcome.

Any such admin setting should have a sensisble default.

As you say, needs to be validated. Might be difficult to ban the word 'token' anywhere in queries - if we find that is needed.