commit fcf249d1f06938280d841cb13b61556971a58e0c
Author: Dan Prince <email address hidden>
Date: Sun Feb 3 22:25:12 2013 -0500
Add a safe_minidom_parse_string function.
Adds a new utils.safe_minidom_parse_string function and
updates external API facing Cinder modules to use it.
This ensures we have safe defaults on our incoming API XML parsing.
Internally safe_minidom_parse_string uses a ProtectedExpatParser
class to disable DTDs and entities from being parsed when using
minidom.
Reviewed: https:/ /review. openstack. org/22311 github. com/openstack/ cinder/ commit/ fcf249d1f069382 80d841cb13b6155 6971a58e0c
Committed: http://
Submitter: Jenkins
Branch: stable/folsom
commit fcf249d1f069382 80d841cb13b6155 6971a58e0c
Author: Dan Prince <email address hidden>
Date: Sun Feb 3 22:25:12 2013 -0500
Add a safe_minidom_ parse_string function.
Adds a new utils.safe_ minidom_ parse_string function and
updates external API facing Cinder modules to use it.
This ensures we have safe defaults on our incoming API XML parsing.
Internally safe_minidom_ parse_string uses a ProtectedExpatP arser
class to disable DTDs and entities from being parsed when using
minidom.
Fixes LP Bug #1100282 for Folsom.
Change-Id: Ie8ae7a6e12fbf5 1de406d10ca2107 2140374abf5