> I don't see anything exploitable there (or I'd have filed a security),
> it just makes me uncomfortable and doubt other aspects of the design.
> Let's call it a code smell. I see a lot of promise in cloud-init, but at
> the same time it's.. quite messy and sprawling.
thanks for being honest. :).
I'll commit the safe_load change.
On Thu, 21 Jun 2012, Tv wrote:
> I don't see anything exploitable there (or I'd have filed a security),
> it just makes me uncomfortable and doubt other aspects of the design.
> Let's call it a code smell. I see a lot of promise in cloud-init, but at
> the same time it's.. quite messy and sprawling.
thanks for being honest. :).
I'll commit the safe_load change.
Josh Harlow has been working on cleaning some of the messy/sprawling up. /code.launchpad .net/~cloud- init/cloud- init/rework
https:/
Any/all input on the changes there are welcome. Ping me in IRC, or join
cloud-init team in launchpad.
Thanks for the input.