murano/murano
Kirill Zaitsev b03c4759aa Use SafeLoader to load yaml files
Before this patch yaml.Loader was used by the engine to create custom
yaql-enabled yaml loader. It is unsafe do to so, because yaml.Loader is
capable of creating custom python objects from specifically constructed
yaml files.
After this patch all yaml load operations are performed with safe
loaders instead.
Also use SafeConstructor instead of Constructor.

Change-Id: I61a3c42d73608b5d013285f015a45f4774d264e3
Closes-Bug: #1586079
2016-06-23 18:30:04 +03:00
..
api Forced flush of tmp file to disk on ui retrieval 2016-05-25 10:07:28 +00:00
cmd Allow insecure SSL communications with RabbitMQ 2016-05-11 18:25:16 +00:00
common Updated *_domain_id to "Default" 2016-06-18 15:03:32 +00:00
db Modified the wrong note 2016-03-14 17:05:06 +08:00
dsl Revert the destroy execution order 2016-05-04 13:53:53 +00:00
engine Use SafeLoader to load yaml files 2016-06-23 18:30:04 +03:00
hacking Python3: Replace basestring by six.string_types 2016-01-18 23:48:37 -08:00
locale Imported Translations from Zanata 2016-01-16 06:15:06 +00:00
packages Added package references to generated UIs 2016-05-25 17:05:56 +00:00
policy Major refactoring of how OS clients are created and managed 2016-02-20 17:59:11 +03:00
services Remove arguments "{}" and "[]" in function definitions 2015-12-19 01:10:30 +08:00
tests Use SafeLoader to load yaml files 2016-06-23 18:30:04 +03:00
__init__.py Extract version definition to a separate file 2014-11-10 13:02:56 +04:00
context.py 'GetPackageUI' API can now be called even if Glare is used 2016-04-11 16:53:06 +03:00
opts.py Deprecate packages_opts conf group 2016-03-15 13:21:50 +03:00
utils.py Allow murano to run under windows 2016-02-01 16:58:01 +03:00
version.py Extract version definition to a separate file 2014-11-10 13:02:56 +04:00