github
/
jumpserver
mirror of https://github.com/jumpserver/jumpserver
1
0
Fork 0
Code Issues Releases Wiki Activity

fix: 禁止一些 ansible 变量

pull/11144/head
Aaron3S 2023-07-31 19:33:39 +08:00 committed by Bryan
parent fcfd7bb469
commit 316df6f9d9
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
apps/ops/models/playbook.py
View File

@ -11,10 +11,15 @@ from ops.exception import PlaybookNoValidEntry
from orgs.mixins.models import JMSOrgBaseModel from orgs.mixins.models import JMSOrgBaseModel
dangerous_keywords = ( dangerous_keywords = (
'hosts:localhost',
'hosts:127.0.0.1',
'hosts:::1',
'delegate_to:localhost', 'delegate_to:localhost',
'delegate_to:127.0.0.1', 'delegate_to:127.0.0.1',
'delegate_to:::1',
'local_action', 'local_action',
'connection:local', 'connection:local',
'ansible_connection'
) )
@ -48,7 +53,14 @@ class Playbook(JMSOrgBaseModel):
with open(file, 'r') as f: with open(file, 'r') as f:
for line_num, line in enumerate(f): for line_num, line in enumerate(f):
for keyword in dangerous_keywords: for keyword in dangerous_keywords:
if keyword in line.replace(' ', ''): clear_line = line.replace(' ', '')\
.replace('\n', '')\
.replace('\r', '')\
.replace('\t', '') \
.replace('\'', '') \
.replace('\"', '')\
.replace('\v', '')
if keyword in clear_line:
result.append((line_num, keyword)) result.append((line_num, keyword))
return result return result