[
https://issues.apache.org/jira/browse/AIRFLOW-6027?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17165099#comment-17165099
]
ASF GitHub Bot commented on AIRFLOW-6027:
-----------------------------------------
mik-laj closed pull request #6625:
URL: https://github.com/apache/airflow/pull/6625
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> Disable API access by default
> -----------------------------
>
> Key: AIRFLOW-6027
> URL: https://issues.apache.org/jira/browse/AIRFLOW-6027
> Project: Apache Airflow
> Issue Type: Bug
> Components: api, security
> Affects Versions: 1.10.6
> Reporter: Kamil Bregula
> Priority: Major
>
> Default configuration should be secure, so open unsecured API is a big
> problem. A lot of Airflow instances may not change the default configuration
> and therefore be vulnerable to third party attacks.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
