Merge pull request #1472 from davidcostanzo/fix-build-module-1456

Fix "play build-module" by replacing yaml.load with yaml.safe_load
playframework · Mar 3, 2024 · e0916dd · e0916dd
2 parents b80ed47 + f21a039
commit e0916dd
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/framework/pym/play/commands/modulesrepo.py b/framework/pym/play/commands/modulesrepo.py
@@ -328,7 +328,7 @@ def build(app, args, env):
     if os.path.exists(deps_file):
         f = open(deps_file)
         try:
-            deps = yaml.load(f.read())
+            deps = yaml.safe_load(f.read())
             if 'self' in deps:
                splitted = deps["self"].split(" -> ")
                if len(splitted) == 2:
@@ -354,7 +354,7 @@ def build(app, args, env):
 
     if os.path.exists(deps_file):
         f = open(deps_file)
-        deps = yaml.load(f.read())
+        deps = yaml.safe_load(f.read())
         if 'self' in deps:
            splitted = deps["self"].split(" -> ")
            f.close()