Comment 82 for bug 1100282

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to nova (stable/folsom)

Reviewed: https://review.openstack.org/22312
Committed: http://github.com/openstack/nova/commit/2ae74f8222058e475350458ca0c820adb910582c
Submitter: Jenkins
Branch: stable/folsom

commit 2ae74f8222058e475350458ca0c820adb910582c
Author: Dan Prince <email address hidden>
Date: Sat Feb 2 11:34:25 2013 -0500

    Add a safe_minidom_parse_string function.

    Adds a new utils.safe_minidom_parse_string function and
    updates external API facing Nova modules to use it.
    This ensures we have safe defaults on our incoming API XML parsing.

    Internally safe_minidom_parse_string uses a ProtectedExpatParser
    class to disable DTDs and entities from being parsed when using
    minidom.

    Fixes LP Bug #1100282 for Folsom.

    Change-Id: I6a4051b5e66f3ce5a330b2589c42e6e9e5b9268e