fabtests/scripts: use yaml safe_load

Follow security best practice. Signed-off-by: Wenduo Wang <wenduwan@amazon.com>
wenduwan · Sep 15, 2023 · cccf66a · cccf66a
1 parent a80b724
commit cccf66a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/fabtests/scripts/parseyaml.py b/fabtests/scripts/parseyaml.py
@@ -82,7 +82,7 @@ def read():
 	else:
 		fd = open(args[0], 'r')
 
-	yi = yaml.load_all(fd.read())
+	yi = yaml.safe_load_all(fd.read())
 
 	if options.d:
 		perfprint(difference(yi))

diff --git a/fabtests/scripts/toCSV.py b/fabtests/scripts/toCSV.py
@@ -23,7 +23,7 @@ def main(argv=None):
 	else:
 		fd = open(args[0], 'r')
 
-	yi = yaml.load(fd.read())
+	yi = yaml.safe_load(fd.read())
 
 	csv_fd = csv.writer(sys.stdout, delimiter=",", quotechar='"', quoting=csv.QUOTE_NONNUMERIC)
 	csv_fd.writerow(["Test name", "Status"])