Before this patch yaml.Loader was used by the client to create custom
yaql-enabled yaml loader. It is unsfae do to so, because yaml.Loader is
capable of creating custom python objects from specifically constructed
yaml files.
UI parsing functions also fell back to yaml.Loader if
the custom loader was not supplied.
After this patch all yaml load operations are performed with safe
loaders instead.
Reviewed: https:/ /review. openstack. org/333443 /git.openstack. org/cgit/ openstack/ python- muranoclient/ commit/ ?id=e470430814c eddadea66d2e4bb 3a9b10b55869e6
Committed: https:/
Submitter: Jenkins
Branch: stable/mitaka
commit e470430814cedda dea66d2e4bb3a9b 10b55869e6
Author: Kirill Zaitsev <email address hidden>
Date: Fri May 27 01:04:31 2016 +0300
Use yaml.SafeLoader instead of yaml.Loader
Before this patch yaml.Loader was used by the client to create custom
yaql-enabled yaml loader. It is unsfae do to so, because yaml.Loader is
capable of creating custom python objects from specifically constructed
yaml files.
UI parsing functions also fell back to yaml.Loader if
the custom loader was not supplied.
After this patch all yaml load operations are performed with safe
loaders instead.
Change-Id: Id9bb6eabda3552 2271ec394f8758a 974878cbb4b
Closes-Bug: #1586078