search

miracle2k / webassets

Asset management for Python web development.
BSD 2-Clause "Simplified" License
924 stars 259 forks source link

YAMLLoadWarning yaml.load is deprecated #517

Closed rsrdesarrollo closed 4 years ago

rsrdesarrollo commented 5 years ago

The YAML loading process is using a deprecated form of yaml.load.

/usr/local/lib/python3.6/site-packages/webassets/loaders.py:162: YAMLLoadWarning: 
*** Calling yaml.load() without Loader=... is deprecated.
*** The default Loader is unsafe.
*** Please read https://msg.pyyaml.org/load for full details.
obj = self.yaml.load(f) or {}

Fixing this warning is as simple as described here https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation#how-to-disable-the-warning

I open this issue to discuss which loader should we use, probably SafeLoader but I'm not sure.