In OpenStack Ironic through 35.x, instance_info['ks_template'] is rendered without sandboxing.Referenceshttps://bugs.launchpad.net/ironic/+bug/2148307