Comment 3 for bug 1015818

Revision history for this message
Scott Moser (smoser) wrote : Re: [Bug 1015818] Re: Please use yaml.safe_load

On Thu, 21 Jun 2012, Tv wrote:

> I don't see anything exploitable there (or I'd have filed a security),
> it just makes me uncomfortable and doubt other aspects of the design.
> Let's call it a code smell. I see a lot of promise in cloud-init, but at
> the same time it's.. quite messy and sprawling.

thanks for being honest. :).
I'll commit the safe_load change.

Josh Harlow has been working on cleaning some of the messy/sprawling up.
https://code.launchpad.net/~cloud-init/cloud-init/rework

Any/all input on the changes there are welcome. Ping me in IRC, or join
cloud-init team in launchpad.

Thanks for the input.