API security tests

[mik-laj]

Description

Before releasing Airflow 2.0, we should review the code and consider whether it is safe.

More information about REST API:
#8107

Use case / motivation

I want to make the internet a safer and better place in the digital world.

Related Issues

N/A

[mik-laj]

This is a very difficult task, because to get it fully we would have to hire security experts to take care of it. I think it is feasible but we need to get funding. One idea I heard somewhere about Airflow 2.0 is a bug-bounty program. This would allow us to check for security bugs in the API, but it's a big topic.

Closing for now as I have no information to be able to successfully obtain funds any time soon. If necessary, we can reopen this ticket.