[ 
https://issues.apache.org/jira/browse/AIRFLOW-5634?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16949730#comment-16949730
 ] 

ASF subversion and git services commented on AIRFLOW-5634:
----------------------------------------------------------

Commit 2599cda2b5450090f5e561c50a34a0bd7ff92533 in airflow's branch 
refs/heads/v1-10-stable from Ash Berlin-Taylor
[ https://gitbox.apache.org/repos/asf?p=airflow.git;h=2599cda ]

[AIRFLOW-5634] Don't allow disabled fields to be edited in DagModelView (#6307)

If someone plays silly games and edits the HTML (or crafts a request) to
the DAG model it is possible to edit fields that aren't meant to be
edited, leading to odd to debug behaviour

> Disabled DagModelView fields can be edited (classic UI)
> -------------------------------------------------------
>
>                 Key: AIRFLOW-5634
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-5634
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: webserver
>    Affects Versions: 1.10.5
>            Reporter: Ash Berlin-Taylor
>            Priority: Minor
>             Fix For: 1.10.6
>
>
> If someone plays silly games and edits the HTML (or crafts a request) to the 
> DAG model it is possible to edit fields that aren't meant to be edited.
> We should stop that.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to