Use yaml.safe_load() rather than the unsafe yaml.load()

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2019-11-19 14:16:28 +01:00 committed by Nils Philippsen
parent 4a9d30a9dd
commit 71b7245439

View file

@ -533,7 +533,7 @@ def _get_override_yaml(project, session):
print('Querying {0}'.format(pagure_override_url))
override_rv = session.get(pagure_override_url, timeout=30)
if override_rv.status_code == 200:
override_yaml = yaml.load(override_rv.text)
override_yaml = yaml.safe_load(override_rv.text)
return override_yaml.get('bugzilla_contact', {})
return {}