commit c3f1cb56a11349cde48034d135976cf2e29856d2
Author: Luong Anh Tuan <email address hidden>
Date: Mon Jan 16 14:30:45 2017 +0700
Replace yaml.load() with yaml.safe_load()
Avoid dangerous file parsing and object serialization libraries.
yaml.load is the obvious function to use but it is dangerous[1]
Bandit flags yaml.load() as security risk so replace all occurrences
with yaml.safe_load().
Reviewed: https:/ /review. openstack. org/420537 /git.openstack. org/cgit/ openstack/ python- ironicclient/ commit/ ?id=c3f1cb56a11 349cde48034d135 976cf2e29856d2
Committed: https:/
Submitter: Jenkins
Branch: master
commit c3f1cb56a11349c de48034d135976c f2e29856d2
Author: Luong Anh Tuan <email address hidden>
Date: Mon Jan 16 14:30:45 2017 +0700
Replace yaml.load() with yaml.safe_load()
Avoid dangerous file parsing and object serialization libraries.
yaml.load is the obvious function to use but it is dangerous[1]
Bandit flags yaml.load() as security risk so replace all occurrences
with yaml.safe_load().
[1]https:/ /security. openstack. org/guidelines/ dg_avoid- dangerous- input-parsing- libraries. html
Change-Id: I6db250c03b8a9c a1942e180983119 0b0e10423a5
Closes-Bug: #1634265