shubhamraj-git opened a new pull request, #67495:
URL: https://github.com/apache/airflow/pull/67495
When a Variable's key matches the sensitive-key heuristic (e.g.
db_password), its value is correctly masked when stored as a plain string but
if the value is valid JSON, the redact() call in VariableResponse.redact_val
was missing the variable key as the second argument. The key-name check inside
redact() never fired, so the raw JSON was returned in cleartext over
/api/v2/variables.
Example -
```
key: db-password
value: {"server1": "actual_secret"}
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
