Skip to content

Commit 3b14b79

Browse files
authored
Remove 'enable_xcom_deserialize_support' because its not used anywhere (#51639)
1 parent 5749e12 commit 3b14b79

File tree

2 files changed

+17
-9
lines changed

2 files changed

+17
-9
lines changed
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
``enable_xcom_deserialize_support`` configuration option has been removed.
2+
3+
This configuration was previously marked as a security risk due to potential remote code execution vulnerabilities
4+
when deserializing arbitrary Python objects that came in from XComs. The removal is a security improvement since
5+
all custom XCom serialization/deserialization is now handled safely at the worker level, making this configuration
6+
unnecessary in core. Users should migrate to not setting this configuration.
7+
8+
* Types of change
9+
10+
* [ ] Dag changes
11+
* [x] Config changes
12+
* [ ] API changes
13+
* [ ] CLI changes
14+
* [ ] Behaviour changes
15+
* [ ] Plugin changes
16+
* [ ] Dependency changes
17+
* [ ] Code interface changes

airflow-core/src/airflow/config_templates/config.yml

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1430,15 +1430,6 @@ api:
14301430
version_added: 2.2.0
14311431
example: ~
14321432
default: ""
1433-
enable_xcom_deserialize_support:
1434-
description: |
1435-
Indicates whether the **xcomEntries** endpoint supports the **deserialize**
1436-
flag. If set to ``False``, setting this flag in a request would result in a
1437-
400 Bad Request error.
1438-
type: boolean
1439-
version_added: 2.7.0
1440-
example: ~
1441-
default: "False"
14421433
grid_view_sorting_order:
14431434
description: |
14441435
Sorting order in grid view. Valid values are: ``topological``, ``hierarchical_alphabetical``

0 commit comments

Comments
 (0)