From 6ccc16a0ab8ce49c22fadb5f90572314e7c1ae7e Mon Sep 17 00:00:00 2001 From: Naga Ravi Chaitanya Elluri Date: Tue, 8 Nov 2022 14:21:39 -0500 Subject: [PATCH] Use autoescape=True to mitigate XSS vulnerabilities Fixes https://github.com/redhat-chaos/krkn/issues/354 --- kraken/network_chaos/actions.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kraken/network_chaos/actions.py b/kraken/network_chaos/actions.py index 9100d27d..efb2d1af 100644 --- a/kraken/network_chaos/actions.py +++ b/kraken/network_chaos/actions.py @@ -34,7 +34,7 @@ def run(scenarios_list, config, wait_duration): for single_node_name in node_name_list: nodelst.extend(common_node_functions.get_node(single_node_name, test_node_label, test_instance_count)) file_loader = FileSystemLoader(os.path.abspath(os.path.dirname(__file__))) - env = Environment(loader=file_loader) + env = Environment(loader=file_loader, autoescape=True) pod_template = env.get_template("pod.j2") test_interface = verify_interface(test_interface, nodelst, pod_template) joblst = []