murano-dashboard/releasenotes
Kirill Zaitsev 338989020c Inherit custom yaml Loader from yaml.SafeLoader
Before this patch yaql-enabled yaml Loader was inherited from yaml.Loader, that
potentially allows creating arbitrary python objects from specifically
formatted yaml tags. This could have happened whenever UI definitions of
the package were processed.
With this change yaql yaml-Loader no longer allows creating custom python objects.

Change-Id: I4fe38aa7e0fc567211ab872c7e1f8e81dbc3e765
Closes-Bug: #1586079
2016-06-23 18:45:11 +03:00
..
notes Inherit custom yaml Loader from yaml.SafeLoader 2016-06-23 18:45:11 +03:00
source Add reno for RElease NOtes 2015-11-26 00:20:39 +03:00