The GitHub Actions job "Tests (AMD)" on airflow.git/backport-69957 has succeeded. Run started by GitHub user pierrejeambrun (triggered by pierrejeambrun).
Head commit for run: 5fe577a054cc6da939c35535aec27e53f01c64a5 / Pierre Jeambrun <[email protected]> Skip stored credentials when a connection test overrides host or port (#69957) The POST /connections/test endpoint restores an existing connection's stored credentials (password/extra) when the request sends the masked sentinel, so a saved connection can be tested without re-typing secrets. Connection configuration users have write-only access to those credentials and are not meant to view them; reusing them while the request points at a caller-supplied host or port applies them against a destination the caller chose rather than the connection's own, which is outside the intent of the retype-free test flow. Scope the credential reuse to requests that keep the stored connection's host and port. Follows the same hardening as #67620. (cherry picked from commit a6d87ba5b0157baf744995d47dd5d6a47e798edb) Report URL: https://github.com/apache/airflow/actions/runs/29578818029 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
