Merge pull request #1970 from jtratner/use-safe-load-with-yaml

Use safe load with yaml
Miserlou · Feb 13, 2020 · 73d2572 · 73d2572
2 parents 4e2526d + 1006c8e
commit 73d2572
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/zappa/cli.py b/zappa/cli.py
@@ -2181,7 +2181,7 @@ def load_settings_file(self, settings_file=None):
         if ext == '.yml' or ext == '.yaml':
             with open(settings_file) as yaml_file:
                 try:
-                    self.zappa_settings = yaml.load(yaml_file)
+                    self.zappa_settings = yaml.safe_load(yaml_file)
                 except ValueError: # pragma: no cover
                     raise ValueError("Unable to load the Zappa settings YAML. It may be malformed.")
         elif ext == '.toml':