[AIRFLOW-3165] Document interpolation of '%' and warn (#4007)

apache · Oct 6, 2018 · 9bea622 · 9bea622
1 parent ff32282
commit 9bea622
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/docs/security.rst b/docs/security.rst
@@ -10,6 +10,12 @@ backends or creating your own.
 
 Be sure to checkout :doc:`api` for securing the API.
 
+.. note::
+
+   Airflow uses the config parser of Python. This config parser interpolates '%'-signs.
+   Make sure not to have those in your passwords if they do not make sense, otherwise
+   Airflow might leak these passwords on a config parser exception to a log.
+
 Web Authentication
 ------------------