Merge pull request #75 from StackStorm-Exchange/yaml-safe-load

Use PyYAML's yaml.safe_load when loading YAML files

Author: blag

.circle/index.py

@@ -40,7 +40,7 @@ def build_index(path_glob, output_path):
     counter = 0
     for filename in generator:
         with open(filename, 'r') as pack:
-            pack_meta = yaml.load(pack)
+            pack_meta = yaml.safe_load(pack)
 
         pack_name = pack_meta['name']
         pack_ref = get_pack_ref_from_metadata(metadata=pack_meta)

utils/pack_content.py

@@ -55,7 +55,7 @@ def construct_mapping(loader, node):
     OrderedLoader.add_constructor(
         yaml.resolver.BaseResolver.DEFAULT_MAPPING_TAG,
         construct_mapping)
-    return yaml.load(stream, OrderedLoader)
+    return yaml.safe_load(stream, OrderedLoader)
 
 
 def ordered_dump(data, stream=None, Dumper=yaml.Dumper, **kwds):