From 60cbc3cbbc202b7cea5efe34660b92bee63ab5a3 Mon Sep 17 00:00:00 2001 From: AlanCoding Date: Fri, 6 Jan 2017 08:24:40 -0500 Subject: [PATCH] do not allow YAML strings that are OrderedDicts --- awx/main/validators.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/awx/main/validators.py b/awx/main/validators.py index 1c92d9a645..c045e936cb 100644 --- a/awx/main/validators.py +++ b/awx/main/validators.py @@ -185,8 +185,9 @@ def vars_validate_or_raise(vars_str): except ValueError: pass try: - yaml.safe_load(vars_str) - return vars_str + r = yaml.safe_load(vars_str) + if not (isinstance(r, basestring) and r.startswith('OrderedDict(')): + return vars_str except yaml.YAMLError: pass raise RestValidationError(_('Must be valid JSON or YAML.'))