From 948238a6893bb5835c0d01468e9a184554e1f11a Mon Sep 17 00:00:00 2001 From: Jake Howard Date: Sun, 2 Oct 2016 12:43:45 +0100 Subject: [PATCH] fix security issue --- config/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/__init__.py b/config/__init__.py index 1c0f0bc..e7e2577 100644 --- a/config/__init__.py +++ b/config/__init__.py @@ -16,7 +16,7 @@ class WrappedSettings: def __init__(self): self.settings_dir = os.path.join(os.path.dirname(__file__), 'config.yml') settings = open(self.settings_dir) - self.settings = yaml.load(settings) + self.settings = yaml.safe_load(settings) def __getattr__(self, name): value = self.settings[name]