Re: [openstack-dev] Can somebody help me to determine if an URL validation in python-glanceclient horizon projects is safe

2014-01-21 Thread Flavio Percoco
On 20/01/14 17:43 +, Victor Joel Morales Ruvalcaba wrote: I'm implementing an URL validation that checks if the external location value provided exists and if it's reachable. To achieve that I'm using the method urlopen of six.moves.urllib.request module which it seems similar like to the

[openstack-dev] Can somebody help me to determine if an URL validation in python-glanceclient horizon projects is safe

2014-01-20 Thread Victor Joel Morales Ruvalcaba
I'm implementing an URL validation that checks if the external location value provided exists and if it's reachable. To achieve that I'm using the method urlopen of six.moves.urllib.request module which it seems similar like to the deprecated django's method of verify_exists. I'm wondering if

Re: [openstack-dev] Can somebody help me to determine if an URL validation in python-glanceclient horizon projects is safe

2014-01-20 Thread Gabriel Hurley
Adding this to glanceclient is probably acceptable since the worst abuse of it would be to disrupt a user's local machine until they terminated the process, but adding this to Horizon is a no-go. Django removed the verify_exists option from URLField in Django 1.5 for very good reasons. Here's