Fix a security issue 91/24591/1
authorwu.zhihui <wu.zhihui1@zte.com.cn>
Mon, 21 Nov 2016 01:42:34 +0000 (09:42 +0800)
committerwu.zhihui <wu.zhihui1@zte.com.cn>
Mon, 21 Nov 2016 01:42:34 +0000 (09:42 +0800)
load yaml file by using function safe_load()
See link http://pyyaml.org/wiki/PyYAMLDocumentation for details.

Change-Id: I91d1746c5ca1bd1770d47d4e8d0f85b6aed47934
Signed-off-by: wu.zhihui <wu.zhihui1@zte.com.cn>
deploy/get_conf.py

index 37cacb5..31ccaca 100755 (executable)
@@ -13,7 +13,7 @@ import yaml
 
 def init(file):
     with open(file) as fd:
-        return yaml.load(fd)
+        return yaml.safe_load(fd)
 
 
 def networkdecorator(func):