rusackas commented on PR #40672: URL: https://github.com/apache/superset/pull/40672#issuecomment-4664243994
Closing this one from the security-triage pass. On reflection it doesn't cross a privilege boundary — it tightens validation of a user's *own* chart post-processing options against the existing per-operation schemas, so it's a robustness/correctness improvement rather than a security fix, and our latest scan doesn't flag it. Happy to reopen it purely as an input-validation cleanup if we want it, but it's not something to worry about from a security standpoint right now. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
