opensource/galaxy
3
0
Fork 0
mirror of https://github.com/galaxyproject/galaxy.git synced 2026-09-24 16:30:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

Only permit yaml.safe_loading of data

Browse Source 
Event trusted data, belt + suspenders method.
This commit is contained in:
E Rasche
2017-09-25 11:39:12 +02:00
parent 9e4259192d
commit 32b85ecb59
25 changed files with 31 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/grt/export.py
+2 -2
View File
@@ -191,11 +191,11 @@ def main(argv):
annotate('init_start', 'Loading GRT configuration...')
try:
with open(args.config) as handle:
config = yaml.load(handle)
config = yaml.safe_load(handle)
except Exception:
logging.info('Using default GRT configuration')
with open(sample_config) as handle:
config = yaml.load(handle)
config = yaml.safe_load(handle)
annotate('init_end')
REPORT_DIR = args.report_directory
scripts/grt/upload.py
+2 -2
View File
@@ -28,11 +28,11 @@ def main(argv):
logging.info('Loading GRT configuration...')
try:
with open(args.config) as handle:
config = yaml.load(handle)
config = yaml.safe_load(handle)
except Exception:
logging.info('Using default GRT configuration')
with open(sample_config) as handle:
config = yaml.load(handle)
config = yaml.safe_load(handle)
REPORT_DIR = args.report_directory
GRT_URL = config['grt']['url'].rstrip('/') + '/'