openstack
/
murano
Code Issues Proposed changes

Merge "Add `nosec` for Bandit issue 506 in resource_manager.py"

This commit is contained in:
Jenkins 2017-04-21 08:07:22 +00:00 committed by Gerrit Code Review
parent 75b47bbabd 3efd12c1c6
commit aaa5cdc14c
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
murano/engine/system/resource_manager.py
View File

@ -72,7 +72,12 @@ class ResourceManager(object):
@specs.inject('receiver', yaqltypes.Receiver())
@specs.meta(constants.META_NO_TRACE, True)
def yaml(cls, receiver, name, owner=None):
return yamllib.load(
# NOTE(kzaitsev, Sam Pilla) Bandit will raise an issue here,
# because it thinks that we're using an unsafe yaml.load.
# However we're passing a SafeLoader here
# (see definition of `yaml_loader` in this file; L27-30)
# so a `nosec` was added to ignore the false positive report.
return yamllib.load( # nosec
cls.string(receiver, name, owner), Loader=yaml_loader)
@staticmethod