The GitHub Actions job "Tests (AMD)" on 
airflow.git/feature/partition-key-regex-filter has failed.
Run started by GitHub user hussein-awala (triggered by hussein-awala).

Head commit for run:
54a42fa093831a59f7b2d223340194c349e3e6e9 / Hussein Awala <[email protected]>
Add ReDoS safeguards for partition_key_pattern regex filter

The pattern is evaluated by the database's regex engine, so a pathological
pattern could consume DB CPU (ReDoS). Mitigations:

- Cap the pattern length (MAX_REGEX_PATTERN_LENGTH) in both the Core and
  Execution API validators, returning 400 for over-long patterns.
- Bound the regex query with a transaction-local statement_timeout on
  PostgreSQL (apply_regex_query_timeout); no-op elsewhere. MySQL bounds
  regex evaluation via its built-in regexp_time_limit; SQLite has no
  server-side regex and MariaDB is unsupported.
- Document the safeguards in assets.rst.

Report URL: https://github.com/apache/airflow/actions/runs/28817286392

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to