Cheetah's #unless and #echo tags are safe, and should be permitted even when safe_templating is enforced. Add them to the whitelist of enabled directives. ---
Our local kickstarts and snippets use these tags, and broke when we upgraded to 2.0.9 recently. I'm not entirely clear about what base to use for patches these days, but this commit is on top of today's stable. It can also be pulled from: git://github.com/icomfort/cobbler.git add-safe-template-tags cobbler/template_api.py | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/cobbler/template_api.py b/cobbler/template_api.py index 1a478da..9076727 100644 --- a/cobbler/template_api.py +++ b/cobbler/template_api.py @@ -78,11 +78,13 @@ class CobblerCompiler(Cheetah.Compiler.ModuleCompiler): 'if', 'elif', 'else', + 'unless', 'def', 'block', 'end', 'for', 'include', + 'echo', 'set', 'snippet', 'errorcatcher', -- 1.7.3.2 _______________________________________________ cobbler-devel mailing list cobbler-devel@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/cobbler-devel