File tree Expand file tree Collapse file tree 2 files changed +17
-9
lines changed
src/airflow/config_templates Expand file tree Collapse file tree 2 files changed +17
-9
lines changed Original file line number Diff line number Diff line change
1
+ ``enable_xcom_deserialize_support `` configuration option has been removed.
2
+
3
+ This configuration was previously marked as a security risk due to potential remote code execution vulnerabilities
4
+ when deserializing arbitrary Python objects that came in from XComs. The removal is a security improvement since
5
+ all custom XCom serialization/deserialization is now handled safely at the worker level, making this configuration
6
+ unnecessary in core. Users should migrate to not setting this configuration.
7
+
8
+ * Types of change
9
+
10
+ * [ ] Dag changes
11
+ * [x] Config changes
12
+ * [ ] API changes
13
+ * [ ] CLI changes
14
+ * [ ] Behaviour changes
15
+ * [ ] Plugin changes
16
+ * [ ] Dependency changes
17
+ * [ ] Code interface changes
Original file line number Diff line number Diff line change @@ -1430,15 +1430,6 @@ api:
1430
1430
version_added : 2.2.0
1431
1431
example : ~
1432
1432
default : " "
1433
- enable_xcom_deserialize_support :
1434
- description : |
1435
- Indicates whether the **xcomEntries** endpoint supports the **deserialize**
1436
- flag. If set to ``False``, setting this flag in a request would result in a
1437
- 400 Bad Request error.
1438
- type : boolean
1439
- version_added : 2.7.0
1440
- example : ~
1441
- default : " False"
1442
1433
grid_view_sorting_order :
1443
1434
description : |
1444
1435
Sorting order in grid view. Valid values are: ``topological``, ``hierarchical_alphabetical``
You can’t perform that action at this time.
0 commit comments