From: wu.zhihui Date: Mon, 21 Nov 2016 01:42:34 +0000 (+0800) Subject: Fix a security issue X-Git-Tag: 1.0.0~85 X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=commitdiff_plain;h=53917cb499147b494fb488e945662535e01013a2;p=daisy.git Fix a security issue load yaml file by using function safe_load() See link http://pyyaml.org/wiki/PyYAMLDocumentation for details. Change-Id: I91d1746c5ca1bd1770d47d4e8d0f85b6aed47934 Signed-off-by: wu.zhihui --- diff --git a/deploy/get_conf.py b/deploy/get_conf.py index 37cacb51..31ccaca0 100755 --- a/deploy/get_conf.py +++ b/deploy/get_conf.py @@ -13,7 +13,7 @@ import yaml def init(file): with open(file) as fd: - return yaml.load(fd) + return yaml.safe_load(fd) def networkdecorator(func):