OpenStack Security Advisory

  1. Bug #1606500
  2. Comment #16

Comment 16 for bug 1606500

Revision history for this message
Zane Bitter (zaneb) wrote : Re: Heat: template source URL allows network port scan

Patch looks good to me. It'd be even better if we could log the exception so the operator can see what's happening.

Long-term I'd love to get rid of the ability to specify a template_url altogether, but that wouldn't be backwards-compatible so we're effectively forced to wait for a new API version.