<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openstack/kolla.git/kolla/tests/test_validate_all_file.py, branch stable/2026.1</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<id>https://git.platform-os.org/openstack/kolla.git/atom?h=stable%2F2026.1</id>
<link rel='self' href='https://git.platform-os.org/openstack/kolla.git/atom?h=stable%2F2026.1'/>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/'/>
<updated>2026-06-11T19:36:25+00:00</updated>
<entry>
<title>kolla-build: Use SandboxedEnvironment to prevent SSTI</title>
<updated>2026-06-11T19:36:25+00:00</updated>
<author>
<name>Michal Nasiadka</name>
<email>mnasiadka@gmail.com</email>
</author>
<published>2026-06-10T16:27:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=d4aa8ee09e2d6e6676ed2dd7144d541e359fef7e'/>
<id>urn:sha1:d4aa8ee09e2d6e6676ed2dd7144d541e359fef7e</id>
<content type='text'>
Switch from jinja2.Environment to
jinja2.sandbox.SandboxedEnvironment to block Server-Side Template
Injection attacks.

Closes-Bug: #2146056

Change-Id: Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8
Signed-off-by: Michal Nasiadka &lt;mnasiadka@gmail.com&gt;
(cherry picked from commit 0b20ffce09552014fa52c45de574511dc2200ac5)
</content>
</entry>
</feed>
