potiuk commented on issue #21827:
URL: https://github.com/apache/airflow/issues/21827#issuecomment-1053750640


   Still feel free to provide a PR yourself if you want.
   
   BTW. This is not really a "Security" issue, really as anyone who have access 
to write DAGs can also dump the value as needed to log or anywhere else. And 
there are plenty other operators where potentially sensitive data is stored in 
XCom - this is because XCom is used often to pulll/push data from external 
systems  - and this is more decision of Dag Authors what to put there. If you 
really want to prevent the users in UI from seeing it, disabling access to XCom 
is the only "real" way.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to