gecong1973 600e5abcfe Replaces yaml.load() with yaml.safe_load() ...

Yaml.load() return Python object may be dangerous if
you receive a YAML document from an untrusted source
such as the Internet. The function yaml.safe_load()
limits this ability to simple Python objects like
integers or lists.

Reference:
https://security.openstack.org/guidelines/dg_avoid-dangerous-input-parsing-libraries.html

Change-Id: I3fea784cb77c699b3262373cb0b7510f841795ac

2017-02-04 12:16:18 +08:00

..

metadata

Make umask change opt-in

2017-01-13 13:22:06 +00:00

source

Replaces yaml.load() with yaml.safe_load()

2017-02-04 12:16:18 +08:00

Makefile

Adding benefits faq + config docs

2015-11-20 11:12:24 -06:00