Closed aermakov-zalando closed 6 years ago
yaml.load allows executing arbitrary code, use safe_load instead.
yaml.load
safe_load
👍
Coverage remained the same at 89.615% when pulling c7cbc80cf668f1369d31e7d8605548881585bc45 on yaml-load into 3be07b32459ee1eae1b922b990082a4b8a8da628 on master.
:+1:
yaml.load
allows executing arbitrary code, usesafe_load
instead.