inputs sanitization...
Hi all! I found the following in the mailing list archives. Does anyone know where I can find a complete list of the sanitization taking place? '>' __gt__ '@' __at__ etc. Thank you, Kostas ************************ It's worth noting that command line parameters are sanitized for security purposes, so passing them unsanitized should only be done in controlled environments where security is not a concern. Otherwise, parameters should be restored to their original values by the tool or a wrapper around the tool. --nate On Oct 5, 2010, at 10:10, Jelle Scholtalbers <j.scholtalbers at gmail.com> wrote:
Hi,
take a look at <options sanitize="False" /> as used also in tools/fastq/fastq_manipulation.xml
Cheers, Jelle
On Tue, Oct 5, 2010 at 12:39 AM, Zhe Chen <zhe at lanl.gov> wrote:
Hi,
I was implementing a galaxy tool. A problem occurs when my input contains ">", linebreak, galaxy seems traslate them to __gt__, __cr____cn__. Is there a way to stop this translation?
Or suggestion to fix this problem?
Thanks
Hi Kostas, look in ~/lib/galaxy/util/__init__.py: # characters that are allowed but need to be escaped mapped_chars = { '>' :'__gt__', '<' :'__lt__', "'" :'__sq__', '"' :'__dq__', '[' :'__ob__', ']' :'__cb__', '{' :'__oc__', '}' :'__cc__', '@' : '__at__', '\n' : '__cn__', '\r' : '__cr__', '\t' : '__tc__' } On Mar 11, 2011, at 6:11 AM, Kostas Karasavvas wrote:
Hi all!
I found the following in the mailing list archives. Does anyone know where I can find a complete list of the sanitization taking place? '>' __gt__ '@' __at__ etc.
Thank you, Kostas
************************ It's worth noting that command line parameters are sanitized for security purposes, so passing them unsanitized should only be done in controlled environments where security is not a concern. Otherwise, parameters should be restored to their original values by the tool or a wrapper around the tool.
--nate
On Oct 5, 2010, at 10:10, Jelle Scholtalbers <j.scholtalbers at gmail.com> wrote:
Hi,
take a look at <options sanitize="False" /> as used also in tools/fastq/fastq_manipulation.xml
Cheers, Jelle
On Tue, Oct 5, 2010 at 12:39 AM, Zhe Chen <zhe at lanl.gov> wrote:
Hi,
I was implementing a galaxy tool. A problem occurs when my input contains ">", linebreak, galaxy seems traslate them to __gt__, __cr____cn__. Is there a way to stop this translation?
Or suggestion to fix this problem?
Thanks
Please keep all replies on the list by using "reply all" in your mail client. To manage your subscriptions to this and other Galaxy lists, please use the interface at:
Greg Von Kuster Galaxy Development Team greg@bx.psu.edu
participants (2)
-
Greg Von Kuster
-
Kostas Karasavvas