Nam Nguyen Hoai 6f75509f9c Replace yaml.load() with yaml.safe_load() ... Avoid dangerous file parsing and object serialization libraries. yaml.load is the obvious function to use but it is dangerous[1] Because yaml.load return Python object may be dangerous if you receive a YAML document from an untrusted source such as the Internet. The function yaml.safe_load limits this ability to simple Python objects like integers or lists. In addition, Bandit flags yaml.load() as security risk so replace all occurrences with yaml.safe_load(). Thus I replace yaml.load() with yaml.safe_load() [1] https://security.openstack.org/guidelines/dg_avoid-dangerous-input-parsing-libraries.html Change-Id: I3f1a756e80b617ba1bcf824ef4dee9a27eb6887a Closes-Bug: #1634265		2017-01-18 09:31:10 +07:00
..
__init__.py	Add HipChat and Slack Notification types	2016-07-29 07:59:32 -07:00
abstract_notifier.py	Add HipChat and Slack Notification types	2016-07-29 07:59:32 -07:00
email_notifier.py	Clean imports in code	2016-10-06 15:27:06 +07:00
hipchat_notifier.py	Merge "Add https proxy support for a hipchat/slack plugin"	2016-11-30 23:07:30 +00:00
jira_notifier.py	Replace yaml.load() with yaml.safe_load()	2017-01-18 09:31:10 +07:00
jiraformat.yml	Add Jira Plugin	2016-09-23 11:06:56 -07:00
pagerduty_notifier.py	Clean imports in code	2016-10-06 15:27:06 +07:00
slack_notifier.py	Slack: support incoming webhooks	2016-12-05 12:54:21 +01:00
webhook_notifier.py	Clean imports in code	2016-10-06 15:27:06 +07:00