bolkedebruin commented on PR #27740:
URL: https://github.com/apache/airflow/pull/27740#issuecomment-1318514538

   You could DOS the webserver with a large pickle without #27540 which is also 
a security issue :-).
   
   As I mentioned I think the proper way to deserialize over-the-wire is to do 
this on the client side. After all if using a transport like HTTP we are 
serializing again. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to