summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorTakeshi <a86487817@gmail.com>2014-10-26 21:21:47 +0900
committerFUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>2014-10-27 19:48:46 +0900
commit16ea9e4701800982afb2c53e5f132b006429dbf6 (patch)
tree3a8ceb3e35a998466fc25ba18fbd3a91240f0ab8
parentdf2cf837abd32bbe04c0916c758ceadf8b3cdff6 (diff)
rest_router: fix security problem
Signed-off-by: Takeshi <a86487817@gmail.com> Signed-off-by: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
-rw-r--r--ryu/app/rest_router.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/ryu/app/rest_router.py b/ryu/app/rest_router.py
index 3a359236..c57e003f 100644
--- a/ryu/app/rest_router.py
+++ b/ryu/app/rest_router.py
@@ -410,7 +410,7 @@ class RouterController(ControllerBase):
def _access_router(self, switch_id, vlan_id, func, rest_param):
rest_message = []
routers = self._get_router(switch_id)
- param = eval(rest_param) if rest_param else {}
+ param = json.loads(rest_param) if rest_param else {}
for router in routers.values():
function = getattr(router, func)
data = function(vlan_id, param, self.waiters)