ashb opened a new issue #9606:
URL: https://github.com/apache/airflow/issues/9606


   The comment for airflow.cfg says this:
   
   ```
   # Whether to enable pickling for xcom (note that this is insecure and allows 
for
   # RCE exploits). This will be deprecated in Airflow 2.0 (be forced to False).
   enable_xcom_pickling = True
   ```
   
   With this false the kinds of values we can serialize is limited to JSON 
(dicts, lists, numbers, strings, None and boolean) there are valid reasons for 
wanting this on I don't think we should remove it entirely -- instead I think 
we should make JSON/not Pickled the default instead.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to