James Cammarata ed56f51f18 Fixing security issue with lookup returns not tainting the jinja2 environment ...

CVE-2017-7481

Lookup returns wrap the result in unsafe, however when used through the
standard templar engine, this does not result in the jinja2 environment being
marked as unsafe as a whole. This means the lookup result looses the unsafe
protection and may become simple unicode strings, which can result in bad
things being re-templated.

This also adds a global lookup param and cfg options for lookups to allow
unsafe returns, so users can force the previous (insecure) behavior.

2017-05-08 12:43:46 -05:00

..

api

Fix docs/api sphinx-build err on 'make rpm' (#24334)

2017-05-05 17:09:38 -04:00

bin

When outputting text to a file, convert to bytes first.

2017-03-30 12:34:38 -04:00

docsite

Fixing security issue with lookup returns not tainting the jinja2 environment

2017-05-08 12:43:46 -05:00

man

added docs to CLI docstringsadded

2017-03-24 15:52:36 -04:00

templates

Docs how to test (2nd) (#24094)

2017-04-28 09:08:26 +01:00