Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Always use a Loader in yaml.load #745

Merged
merged 1 commit into from Oct 24, 2021
Merged

Always use a Loader in yaml.load #745

merged 1 commit into from Oct 24, 2021

Commits on Oct 24, 2021

  1. Always use a Loader in yaml.load 

    A recent change within pyyaml 6.0 has enforce use of a Loader argument
to yaml.load [1].

To comply, Bandit will use yaml.load with a Loader always. The plugin
to check for unsafe loaders of yaml module still applies.

[1] yaml/pyyaml#561

Closes #744

Signed-off-by: Eric Brown <browne@vmware.com>
    @ericwb
    ericwb committed Oct 24, 2021
    Copy the full SHA
    444181c View commit details
    Browse the repository at this point in the history