[ https://issues.apache.org/jira/browse/AIRFLOW-5634?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16949730#comment-16949730 ]
ASF subversion and git services commented on AIRFLOW-5634: ---------------------------------------------------------- Commit 2599cda2b5450090f5e561c50a34a0bd7ff92533 in airflow's branch refs/heads/v1-10-stable from Ash Berlin-Taylor [ https://gitbox.apache.org/repos/asf?p=airflow.git;h=2599cda ] [AIRFLOW-5634] Don't allow disabled fields to be edited in DagModelView (#6307) If someone plays silly games and edits the HTML (or crafts a request) to the DAG model it is possible to edit fields that aren't meant to be edited, leading to odd to debug behaviour > Disabled DagModelView fields can be edited (classic UI) > ------------------------------------------------------- > > Key: AIRFLOW-5634 > URL: https://issues.apache.org/jira/browse/AIRFLOW-5634 > Project: Apache Airflow > Issue Type: Bug > Components: webserver > Affects Versions: 1.10.5 > Reporter: Ash Berlin-Taylor > Priority: Minor > Fix For: 1.10.6 > > > If someone plays silly games and edits the HTML (or crafts a request) to the > DAG model it is possible to edit fields that aren't meant to be edited. > We should stop that. -- This message was sent by Atlassian Jira (v8.3.4#803005)