slice-soupam commented on PR #72297:
URL: https://github.com/apache/airflow/pull/72297#issuecomment-6452120261

   @ephraimbuddy  Rebased onto current main.
   
   On security — I looked at the same angles we already have for parse-time 
Variable / XCom reads:
   
   1. Goes through the existing in-process Execution API client
   2. Only runnable via code the Dag processor already executes (top-level / 
callbacks), not an external caller
   3. Still requires concrete dag_id / run_id / task_id from the callback 
context
   4. DeleteXCom and other lifecycle messages stay unsupported
   Is there anything specific you’d want me to dig?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to