Github user srowen commented on the issue:
https://github.com/apache/spark/pull/22852
I get it, the "it's your responsibility" stance, and it is. For any risk
there's a sentence in this doc we could point to and say, "see, told you". If
we're going to make a change here, adding another para saying "below, we told
you so" isn't additive. Especially if we're trying to use this change to
actively mitigate security issues. More useful is a cheat-sheet, TL;DR, simply
enumerating the top things you don't want to miss. I think it's more useful
than redundant. I can take a crack at that too.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org
For additional commands, e-mail: reviews-h...@spark.apache.org
