gecong1973 2622db666a Replaces yaml.load() with yaml.safe_load() ...

Yaml.load() return Python object may be dangerous if
you receive a YAML document from an untrusted source
such as the Internet. The function yaml.safe_load()
limits this ability to simple Python objects like
integers or lists.

Reference:
https://security.openstack.org/guidelines/dg_avoid-dangerous-input-parsing-libraries.html

Change-Id: I9f865703630fa5c51943db9d31784f8fe2431806

2017-02-04 11:36:24 +08:00

6.4 KiB

Raw Blame History

View Raw