[GitHub] [airflow] ecerulm edited a comment on issue #14597: Provide jinja template syntax to access connections

[GitBox <gi...@apache.org>]

ecerulm edited a comment on issue #14597:
URL: https://github.com/apache/airflow/issues/14597#issuecomment-791259473


   > . Otherwise, it is very easy for an unauthorized person to gain access to this data, which we would like to avoid.
   
   Nothing against that, but it's already very easy for any DAG author to expose any connections secret by simply putting in the DAG
   
   ```
   from airflow.models import Connection
   c = Connection.get_connection_from_secrets(name)
   ....
   task = BashOperator(task_id='expose_secrets', bash_command='echo'+c.password, dag=dag)
   ```
   
   So I don't think introducing this feature modifies the already existing risk or am I misunderstanding something here?


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org