Comment 36 for bug 2048114

Revision history for this message
Takashi Kajinami (kajinamit) wrote : Re: OpenStack Murano Component Information Leakage

I discussed this problem with Rabi and we agreed with removing the function now because it's a huge risk to maintain the function, and if we aim to remove it in the future then removing it now does not make much difference.

We also learned that we can replace the format function relatively easily. For example, if you have

 format("{0}-{1}", a b)

then you can replace it by

 str(a) + '-' + str(b)

using + and str function in YAQL.

I've updated the patch to remove the function directly. I'm hoping to hear any feedback from Mistral (or Murano) but if I hear nothing in a few days then I'll push this change and merge it (then request a new release of YAQL)