diff options
author | Dan Prince <dprince@redhat.com> | 2013-02-01 17:04:27 -0500 |
---|---|---|
committer | Dan Prince <dprince@redhat.com> | 2013-02-19 09:12:01 -0500 |
commit | 59933249054bf71ec963585198583fe78050c9d6 (patch) | |
tree | ebc4eb8b5f6cef1b3452a47985acaa480e40efc8 /nova/exception.py | |
parent | 1b9b66ba210c1dd886a95d79e5621e13fb64aa3a (diff) | |
download | nova-59933249054bf71ec963585198583fe78050c9d6.tar.gz nova-59933249054bf71ec963585198583fe78050c9d6.tar.xz nova-59933249054bf71ec963585198583fe78050c9d6.zip |
Add a safe_minidom_parse_string function.
Adds a new utils.safe_minidom_parse_string function and
updates external API facing Nova modules to use it.
This ensures we have safe defaults on our incoming API XML parsing.
Internally safe_minidom_parse_string uses a ProtectedExpatParser
class to disable DTDs and entities from being parsed when using
minidom.
Fixes LP Bug #1100282.
Change-Id: Ib90d6379320ff1d007f8a661f7ddaa286ba6918e
Diffstat (limited to 'nova/exception.py')
0 files changed, 0 insertions, 0 deletions