Luong Anh Tuan cf81bd39a6 Replace yaml.load() with yaml.safe_load() ... Avoid dangerous file parsing and object serialization libraries. yaml.load is the obvious function to use but it is dangerous[1] Because yaml.load return Python object may be dangerous if you receive a YAML document from an untrusted source such as the Internet. The function yaml.safe_load limits this ability to simple Python objects like integers or lists. In addition, Bandit flags yaml.load() as security risk so replace all occurrences with yaml.safe_load(). Thus I replace yaml.load() with yaml.safe_load() [1]https://security.openstack.org/guidelines/dg_avoid-dangerous-input-parsing-libraries.html Change-Id: Ife71148013d5f94ec5ae62633ff9a41f419bd3b7 Closes-Bug: #1634265		2017-01-18 11:47:26 +07:00
..
asset_history.sh	Replace yaml.load() with yaml.safe_load()	2017-01-18 11:47:26 +07:00
check_app_catalog_yaml.py	Replace yaml.load() with yaml.safe_load()	2017-01-18 11:47:26 +07:00
testserver.py	More CORS support	2015-09-01 09:23:00 -07:00
update_assets.sh	Revert "Keep assets_merge.yaml"	2016-08-31 00:09:00 +00:00
yaml2json.py	Replace yaml.load() with yaml.safe_load()	2017-01-18 11:47:26 +07:00