bolkedebruin commented on PR #26343: URL: https://github.com/apache/airflow/pull/26343#issuecomment-1318384454
@uranusjr I intend to remove this feature as I think this is potentially a security issue in the webserver, particularly after #27540 gets merged which `imports` the class referenced to. Custom XCom backend as referenced in #26174 should implement their own `orm_deserialize_value` if they have a need for a full deserialization. However, my suggestion would be to implement deserialization on the client side. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
