potiuk opened a new pull request, #67103: URL: https://github.com/apache/airflow/pull/67103
Backport of [#66417](https://github.com/apache/airflow/pull/66417) to `v3-2-test` for inclusion in the 3.2.2 release. ## Scope Surgical backport — brings **only** the LDAP-escape hunks from #66417: - `_search_ldap`: escape `username` with `ldap.filter.escape_filter_chars` before f-string interpolation into the LDAP filter. - `_ldap_get_nested_groups`: escape `user_dn` likewise. #66417 also bundled unrelated changes (JWT decode rewrite removing `import jwt`, `uuid.uuid1` → `uuid.uuid4` in `registration_hash`, `_hash_password` change in `add_register_user`) that are **not** included here. Those remain on `main` and should be considered for backport on their own merits if needed. --- Generated-by: Claude Opus 4.7 (1M context) following the guidelines at https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
