Use yaml.safe_load to fix microsoft#136

derekbekoe · Feb 11, 2019 · 0143814 · 0143814
1 parent 07ce4c3
commit 0143814
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/knack/help.py b/knack/help.py
@@ -123,7 +123,7 @@ class HelpFile(HelpObject):
     def _load_help_file_from_string(text):
         import yaml
         try:
-            return yaml.load(text) if text else None
+            return yaml.safe_load(text) if text else None
         except Exception:  # pylint: disable=broad-except
             return text
 

diff --git a/knack/help_files.py b/knack/help_files.py
@@ -11,5 +11,5 @@
 def _load_help_file(delimiters):
     import yaml
     if delimiters in helps:
-        return yaml.load(helps[delimiters])
+        return yaml.safe_load(helps[delimiters])
     return None
diff --git a/setup.py b/setup.py
@@ -9,7 +9,7 @@
 from codecs import open
 from setuptools import setup, find_packages
 
-VERSION = '0.5.1'
+VERSION = '0.5.2'
 
 DEPENDENCIES = [
     'argcomplete',