The GitHub Actions job "Tests (AMD)" on airflow.git/backport-69957 has 
succeeded.
Run started by GitHub user pierrejeambrun (triggered by pierrejeambrun).

Head commit for run:
5fe577a054cc6da939c35535aec27e53f01c64a5 / Pierre Jeambrun 
<[email protected]>
Skip stored credentials when a connection test overrides host or port (#69957)

The POST /connections/test endpoint restores an existing connection's stored
credentials (password/extra) when the request sends the masked sentinel, so a
saved connection can be tested without re-typing secrets. Connection
configuration users have write-only access to those credentials and are not
meant to view them; reusing them while the request points at a caller-supplied
host or port applies them against a destination the caller chose rather than
the connection's own, which is outside the intent of the retype-free test flow.

Scope the credential reuse to requests that keep the stored connection's host
and port. Follows the same hardening as #67620.

(cherry picked from commit a6d87ba5b0157baf744995d47dd5d6a47e798edb)

Report URL: https://github.com/apache/airflow/actions/runs/29578818029

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to