Comment 4 for bug 1366990

Revision history for this message
Xing Yang (xing-yang) wrote :

The input is not from a user. When a volume is created, the object path is retrieved from SMI-S and stored in provider_location by the driver. I don't see security vulnerability here.