Bug #22954
Template importing should only deserialize safe objects from YAML
Related issues
Associated revisions
History
#1
Updated by The Foreman Bot over 4 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/foreman/pull/5340 added
#2
Updated by Tomer Brisker over 4 years ago
- Related to Refactor #19846: Fix Rubocop: Security/YAMLLoad added
#3
Updated by Anonymous over 4 years ago
- Legacy Backlogs Release (now unused) set to 330
#4
Updated by Marek Hulán over 4 years ago
- % Done changed from 0 to 100
- Status changed from Ready For Testing to Closed
Applied in changeset f2ab59d71abb022ee4d0da77eeaf24f8765010d3.
Fixes #22954 - only deserialize safe objects