Before this patch yaql-enabled yaml Loader was inherited from yaml.Loader, that
potentially allows creating arbitrary python objects from specifically
formatted yaml tags. This could have happened whenever UI definitions of
the package were processed.
With this change yaql yaml-Loader no longer allows creating custom python objects.
Reviewed: https:/ /review. openstack. org/333428 /git.openstack. org/cgit/ openstack/ murano- dashboard/ commit/ ?id=66ef3d71941 c4bd672d1e8e37d 8f7b199acd5462
Committed: https:/
Submitter: Jenkins
Branch: master
commit 66ef3d71941c4bd 672d1e8e37d8f7b 199acd5462
Author: Kirill Zaitsev <email address hidden>
Date: Fri May 27 00:11:28 2016 +0300
Inherit custom yaml Loader from yaml.SafeLoader
Before this patch yaql-enabled yaml Loader was inherited from yaml.Loader, that
potentially allows creating arbitrary python objects from specifically
formatted yaml tags. This could have happened whenever UI definitions of
the package were processed.
With this change yaql yaml-Loader no longer allows creating custom python objects.
Change-Id: I4fe38aa7e0fc56 7211ab872c7e1f8 e81dbc3e765
Closes-Bug: #1586079