Abacn commented on PR #40421: URL: https://github.com/apache/beam/pull/40421#issuecomment-6019567173
> This is useful. I also think that we should follow up with a security model for the data flowing through a running pipeline. For example, if a malicious Pub/Sub message could gain privileges on the worker, that should be in scope. But we want to describe it more carefully than my comment - we only control the Beam logic. But we would generally not expect "data" to allow RCE. Yeah, currently L66 and L67 explicitly covers RCE and SQL injection of incoming data. (L66 was taken from Flink security model statements), now changed the statement to be more generic -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
