Samin061 commented on issue #71274: URL: https://github.com/apache/airflow/issues/71274#issuecomment-5263835802
Tested #70515 against 3.3.1rc1. is_safe_url now rejects the backslash-after-scheme variants (https:\\evil.com, https:/\evil.com, https:\\/evil.com and the percent-encoded form) while same-origin paths like /dags still resolve. Works as expected on my end. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
