refactor: Use more secure yaml load method

joshkurz · Jan 11, 2023 · 3729123 · 3729123
1 parent a8a3a3e
commit 3729123
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/hardeneks/__init__.py b/hardeneks/__init__.py
@@ -153,7 +153,7 @@ def run_hardeneks(
     console.print()
 
     with open(config, "r") as f:
-        config = yaml.load(f, Loader=yaml.FullLoader)
+        config = yaml.safe_load(f)
 
     if not namespace:
         namespaces = _get_namespaces(config["ignore-namespaces"])