Merge pull request #715 from grycap/devel

Fix security error with xmlrpclib
grycap · Nov 15, 2018 · 4acec20 · 4acec20
2 parents 95c5413 + 532e3d4
commit 4acec20
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/IM/connectors/OpenNebula.py b/IM/connectors/OpenNebula.py
@@ -21,6 +21,8 @@
     from xmlrpc.client import ServerProxy
 
 import time
+import defusedxml.xmlrpc
+defusedxml.xmlrpc.monkey_patch()
 
 from distutils.version import LooseVersion
 from IM.xmlobject import XMLObject

diff --git a/setup.py b/setup.py
@@ -64,5 +64,5 @@
       platforms=["any"],
       install_requires=["ansible >= 2.0", "paramiko >= 1.14", "PyYAML", suds_pkg, sqlite_pkg, "cheroot",
                         "boto >= 2.29", "apache-libcloud >= 2.4.0", "RADL >= 1.1.1", "bottle", "netaddr",
-                        "requests >= 2.19", "scp", "tosca-parser"]
+                        "requests >= 2.19", "scp", "tosca-parser", 'defusedxml']
       )