github-actions[bot] opened a new pull request, #61582: URL: https://github.com/apache/airflow/pull/61582
Azure Blob Storage, Azure File Share, and Azure Data Lake store connection strings and shared access keys in the connection `extra` JSON under keys that were not matched by the existing sensitive field patterns. This allowed users with read-only Connection permissions (e.g. Viewer role) to retrieve these secrets in plaintext via the API. Adding `connection_string` and `access_key` to the default set ensures these values are automatically redacted in API responses and logs. (cherry picked from commit 6d9d86c6ca3816789d16d2cd084ac0e0ee4b4406) Co-authored-by: Ankit Chaurasia <[email protected]> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
