[
https://issues.apache.org/jira/browse/AIRFLOW-2884?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Kaxil Naik resolved AIRFLOW-2884.
---------------------------------
Resolution: Fixed
Fix Version/s: 2.0.0
Resolved by https://github.com/apache/incubator-airflow/pull/3729
> Fix Flask SECRET_KEY security issue in www_rbac
> ------------------------------------------------
>
> Key: AIRFLOW-2884
> URL: https://issues.apache.org/jira/browse/AIRFLOW-2884
> Project: Apache Airflow
> Issue Type: Bug
> Components: webapp, webserver
> Reporter: Xiaodong DENG
> Assignee: Xiaodong DENG
> Priority: Critical
> Fix For: 2.0.0
>
>
> Flask secret key should be as random as possible, while it's not in Airflow
> Flask App.
> This issue was fixed for *www* in ticket
> https://issues.apache.org/jira/browse/AIRFLOW-2809 (merged in PR
> [https://github.com/apache/incubator-airflow/pull/3651)] .
> But this issue was not fixed for *www_rbac* yet.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
