From a1578e67e4672daa645cc07a04323ccd3867da79 Mon Sep 17 00:00:00 2001 From: Himanshu Pant Date: Wed, 19 Aug 2020 15:49:41 -0400 Subject: [PATCH] Updated `yaml.load` to `yaml.safe_load` PyYAML's .load method has been deprecated without the use of a loader and detailed into a security vulnerability, many audit workflows and CI tests are failing and this module works without any issues with just `safe_load`, hence the commit. This can be read in detail on their wiki https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation --- faicon/models.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/faicon/models.py b/faicon/models.py index 689beb8b..91a010bd 100644 --- a/faicon/models.py +++ b/faicon/models.py @@ -20,7 +20,7 @@ def get_icon_list(): check FAICON_YAML_FILE setting.".format(YAML_FILE) ) with open(file, 'r', encoding='utf-8') as stream: - data_loaded = yaml.load(stream) + data_loaded = yaml.safe_load(stream) return data_loaded