Use YAML.safe_load instead of YAML.load

projectblacklight · Jan 22, 2017 · 904273a · 904273a
1 parent 28ef083
commit 904273a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/lib/blacklight.rb b/lib/blacklight.rb
@@ -83,7 +83,7 @@ def self.blacklight_yml
     end
 
     begin
-      @blacklight_yml = YAML.load(blacklight_erb)
+      @blacklight_yml = YAML.safe_load(blacklight_erb)
     rescue => e
       raise("#{blacklight_config_file} was found, but could not be parsed.\n#{e.inspect}")
     end

diff --git a/lib/railties/blacklight.rake b/lib/railties/blacklight.rake
@@ -15,7 +15,7 @@ namespace :blacklight do
     task :seed => [:environment]  do
       require 'yaml'
 
-      docs = YAML.load(File.open(File.join(Blacklight.root, 'solr', 'sample_solr_documents.yml')))
+      docs = YAML.safe_load(File.open(File.join(Blacklight.root, 'solr', 'sample_solr_documents.yml')))
       conn = Blacklight.default_index.connection
       conn.add docs
       conn.commit