Many APIs does not do schema validation for the inputs.
Bug #1771763 reported by
dyyang@cn.ibm.com
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
zVM Cloud Connector |
Confirmed
|
Medium
|
cao biao |
Bug Description
We had removed the input validation in API layer, so we depends on the wsgi layer to do the validation.
But now we can find many handlers does not do the validation at all.
A few examples in handlers/guest.py:
guest_couple_
guest_create_
guest_create_nic
...
Changed in python-zvm-sdk: | |
status: | New → In Progress |
Changed in python-zvm-sdk: | |
importance: | Undecided → Medium |
Changed in python-zvm-sdk: | |
status: | In Progress → Confirmed |
To post a comment you must log in.
@Bill, can you help on this?