use yaml.safe_load for untrusted yaml input

ros-infrastructure / rosdoc_lite

A light-weight version of rosdoc that does not rely on ROS infrastructure for crawling packages.

10 stars 31 forks source link

Closed dirk-thomas closed 5 years ago

dirk-thomas commented 5 years ago

The patch only updates the invocation where untrusted sources are being processed.

dirk-thomas commented 5 years ago

@tfoote Can you please make a new release into all active distros. Thanks.