rusackas opened a new pull request, #43395: URL: https://github.com/apache/superset/pull/43395
### SUMMARY - Report webhook delivery now validates the actual connected peer address (not just the hostname resolved at validation time), closing a DNS-rebinding window, and no longer includes the raw response body in the persisted execution-log error message. - Alert/report `EDITOR` executor resolution no longer falls back to an arbitrary active editor; it resolves only to the schedule's own last-modifier or creator. - The dashboard screenshot-cache endpoints now resolve a supplied permalink key as the calling user (instead of bypassing per-object access checks) and bind cached entries to the specific object they were computed for. - The thumbnail-digest RLS component now prefers the ambient guest-token identity over a database-user lookup by the same name, avoiding a digest collision when a guest token's username matches a real database user's. - The websocket service's pong handler now guards its socket-registry lookup against inherited object keys. ### TESTING INSTRUCTIONS `pytest tests/unit_tests/reports/ tests/unit_tests/tasks/ tests/unit_tests/utils/screenshot_test.py tests/unit_tests/thumbnails/` for the Python changes; `npm test` in `superset-websocket/` for the websocket change. New/extended tests per change, each verified to fail pre-fix and pass post-fix. ### ADDITIONAL INFORMATION - [ ] Has associated issue: - [ ] Required feature flags: - [ ] Changes UI - [ ] Includes DB Migration - [ ] Introduces new feature or API - [ ] Removes existing feature or API -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
