From 20d79d58ad8e4bb8fe29511cb0fb506a74cef48b Mon Sep 17 00:00:00 2001 From: "Salvador E. Tropea" Date: Sun, 21 Jun 2020 11:58:35 -0300 Subject: [PATCH] Restricted the YAML support to safe features. I think it doesn't change anything important, but looks sensitive. --- kiplot/config_reader.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kiplot/config_reader.py b/kiplot/config_reader.py index b2341023..077a4c47 100644 --- a/kiplot/config_reader.py +++ b/kiplot/config_reader.py @@ -243,7 +243,7 @@ class CfgYamlReader(object): :param fstream: file stream of a config YAML file """ try: - data = yaml.load(fstream) + data = yaml.safe_load(fstream) except yaml.YAMLError as e: config_error("Error loading YAML "+str(e)) # List of outputs