Comment 9 for bug 1634265

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-ironicclient (master)

Reviewed: https://review.openstack.org/420537
Committed: https://git.openstack.org/cgit/openstack/python-ironicclient/commit/?id=c3f1cb56a11349cde48034d135976cf2e29856d2
Submitter: Jenkins
Branch: master

commit c3f1cb56a11349cde48034d135976cf2e29856d2
Author: Luong Anh Tuan <email address hidden>
Date: Mon Jan 16 14:30:45 2017 +0700

    Replace yaml.load() with yaml.safe_load()

    Avoid dangerous file parsing and object serialization libraries.
    yaml.load is the obvious function to use but it is dangerous[1]
    Bandit flags yaml.load() as security risk so replace all occurrences
    with yaml.safe_load().

    [1]https://security.openstack.org/guidelines/dg_avoid-dangerous-input-parsing-libraries.html

    Change-Id: I6db250c03b8a9ca1942e1809831190b0e10423a5
    Closes-Bug: #1634265