You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Kaxil Naik (JIRA)" <ji...@apache.org> on 2018/08/10 10:32:00 UTC
[jira] [Resolved] (AIRFLOW-2884) Fix Flask SECRET_KEY security
issue in www_rbac
[ https://issues.apache.org/jira/browse/AIRFLOW-2884?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Kaxil Naik resolved AIRFLOW-2884.
---------------------------------
Resolution: Fixed
Fix Version/s: 2.0.0
Resolved by https://github.com/apache/incubator-airflow/pull/3729
> Fix Flask SECRET_KEY security issue in www_rbac
> ------------------------------------------------
>
> Key: AIRFLOW-2884
> URL: https://issues.apache.org/jira/browse/AIRFLOW-2884
> Project: Apache Airflow
> Issue Type: Bug
> Components: webapp, webserver
> Reporter: Xiaodong DENG
> Assignee: Xiaodong DENG
> Priority: Critical
> Fix For: 2.0.0
>
>
> Flask secret key should be as random as possible, while it's not in Airflow Flask App.
> This issue was fixed for *www* in ticket https://issues.apache.org/jira/browse/AIRFLOW-2809 (merged in PR [https://github.com/apache/incubator-airflow/pull/3651)] .
> But this issue was not fixed for *www_rbac* yet.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)