summeriver13 commented on issue #74601: URL: https://github.com/apache/airflow/issues/74601#issuecomment-6129937157
Reproduced locally on a copy of the wrapper builder: a `$(...)`, backtick or `;` inside an `environment` value runs in the wrapper shell on the remote host before the job starts. The escape at `providers/ssh/src/airflow/providers/ssh/utils/remote_job.py:186` targets the inner single-quoted context, but the text is spliced into `job_script='...'` at line 224. Per `.github/SECURITY.md` this belongs in [email protected], not a public issue. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
