From 95987985ddda6835b394cef50aeca90e7f3c9227 Mon Sep 17 00:00:00 2001 From: Naoya Kanai Date: Wed, 27 May 2020 01:38:02 -0700 Subject: [PATCH] PyYAML safe_load --- knowledge_repo/repositories/gitrepository.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/knowledge_repo/repositories/gitrepository.py b/knowledge_repo/repositories/gitrepository.py index 99aa02865..0ea8ed053 100644 --- a/knowledge_repo/repositories/gitrepository.py +++ b/knowledge_repo/repositories/gitrepository.py @@ -76,7 +76,7 @@ def init(self, config='git:///.knowledge_repo_config.yml', auto_create=False): if config.startswith('git:///'): assert config.endswith('.yml'), "In-repository configuration must be a YAML file." try: - self.config.update(yaml.load(self.git_read(config.replace('git:///', '')))) + self.config.update(yaml.safe_load(self.git_read(config.replace('git:///', '')))) except KeyError: logger.warning("Repository missing configuration file: {}".format(config)) else: