commit ce7a31d5f87e0a77a4448937defb4e0a98a69163
Author: Luong Anh Tuan <email address hidden>
Date: Mon Jan 16 14:40:52 2017 +0700
Replace yaml.load() with yaml.safe_load()
Avoid dangerous file parsing and object serialization libraries.
yaml.load is the obvious function to use but it is dangerous[1]
Bandit flags yaml.load() as security risk so replace all occurrences
with yaml.safe_load().
Reviewed: https:/ /review. openstack. org/420541 /git.openstack. org/cgit/ openstack/ cinder/ commit/ ?id=ce7a31d5f87 e0a77a4448937de fb4e0a98a69163
Committed: https:/
Submitter: Jenkins
Branch: master
commit ce7a31d5f87e0a7 7a4448937defb4e 0a98a69163
Author: Luong Anh Tuan <email address hidden>
Date: Mon Jan 16 14:40:52 2017 +0700
Replace yaml.load() with yaml.safe_load()
Avoid dangerous file parsing and object serialization libraries.
yaml.load is the obvious function to use but it is dangerous[1]
Bandit flags yaml.load() as security risk so replace all occurrences
with yaml.safe_load().
[1]https:/ /security. openstack. org/guidelines/ dg_avoid- dangerous- input-parsing- libraries. html
Change-Id: Iba7924715c9ef6 6fec9f875f11a22 61789e6aa0d
Closes-Bug: #1634265