From 8d0e4f5a0e8dd2ce090b681a58ed0837cf9e8f4c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Herv=C3=A9=20Beraud?= <herveberaud.pro@gmail.com>
Date: Sat, 30 Jun 2018 17:47:08 +0200
Subject: [PATCH] fix CVE-2017-2809 - code injection interpreted by yaml loader
 (#16)

---
 config.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config.py b/config.py
index ae6b1c3..38b8da9 100644
--- a/config.py
+++ b/config.py
@@ -1,4 +1,4 @@
 import yaml
 
 with open("config.yaml", "r") as f:
-    settings = yaml.load(f)
+    settings = yaml.safe_load(f)