fix CVE-2017-2809 - code injection interpreted by yaml loader (#16)

2018-06-30 17:47:08 +02:00
parent e3f6ddb202
commit 8d0e4f5a0e
1 changed files with 1 additions and 1 deletions
@@ -1,4 +1,4 @@
 import yaml

 with open("config.yaml", "r") as f:
-    settings = yaml.load(f)
+    settings = yaml.safe_load(f)