Update _magics.py (#2747)

switched yaml.loader to use SafeLoader
vega · Dec 11, 2022 · e05fb91 · e05fb91
1 parent 541bc58
commit e05fb91
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/altair/_magics.py b/altair/_magics.py
@@ -127,7 +127,7 @@ def namevar(s):
                 "Install pyyaml to parse spec as yaml"
             )
     else:
-        spec = yaml.load(cell, Loader=yaml.FullLoader)
+        spec = yaml.load(cell, Loader=yaml.SafeLoader)
 
     if data:
         spec["data"] = []
@@ -176,7 +176,7 @@ def vegalite(line, cell):
                 "Install pyyaml to parse spec as yaml"
             )
     else:
-        spec = yaml.load(cell, Loader=yaml.FullLoader)
+        spec = yaml.load(cell, Loader=yaml.SafeLoader)
 
     if args.data is not None:
         data = _get_variable(args.data)