#205 Skip validation against package names
Merged 5 years ago by ralph. Opened 5 years ago by qwan.

@@ -164,7 +164,7 @@ 

                      "Only 'source' key is allowed to contain dict.")

              validate_json_data(v, level + 1, k)

          elif isinstance(v, list):

-             validate_json_data(v, level + 1)

+             validate_json_data(v, level + 1, k)

          elif isinstance(v, six.string_types):

              # Packages are stored in comps.xml, not in pungi.conf, so it is

              # not exploitable.

This is a follow up fix to 5ce6431, validate_json_data should take
the key as last_dict_key too when item is list.

Pull-Request has been merged by ralph

5 years ago