Rename the type filter to type_debug

Because we add the names of all filters to the callable whitelist used
by safe_eval, adding a filter named type makes it so code calling "type()"
gets eval'd.  We can't think of a way to exploit this but it's
sufficiently sketchy that we're renaming it in case someone smarter than
us can think of a problem.
This commit is contained in:
Toshio Kuratomi 2017-01-11 13:46:22 -08:00
commit eeebd51f21
2 changed files with 3 additions and 3 deletions

View file

@ -622,11 +622,11 @@ Debugging Filters
.. versionadded:: 2.3 .. versionadded:: 2.3
Use the ``type`` filter to display the underlying Python type of a variable. Use the ``type_debug`` filter to display the underlying Python type of a variable.
This can be useful in debugging in situations where you may need to know the exact This can be useful in debugging in situations where you may need to know the exact
type of a variable:: type of a variable::
{{ myvar | type }} {{ myvar | type_debug }}
A few useful filters are typically added with each new Ansible release. The development documentation shows A few useful filters are typically added with each new Ansible release. The development documentation shows

View file

@ -534,5 +534,5 @@ class FilterModule(object):
'skip' : skipped, 'skip' : skipped,
# debug # debug
'type': lambda o: o.__class__.__name__, 'type_debug': lambda o: o.__class__.__name__,
} }