From 2ddc3f324ceb38b9d95c5bec6ca1c3f58cea0b9f Mon Sep 17 00:00:00 2001 From: Kiran_totad Date: Mon, 24 Jul 2017 15:06:02 +0530 Subject: [PATCH] Use yaml.safe_load instead of yaml.load Fixing some places where it should be possible to use yaml.safe_load. These issues were found by the automated code scanner (Bandit): https://ci.fuel-infra.org/job/bandit-security-check/3892/console Change-Id: I4a042669a1f920cb46433f1eca63c2c7ecd20763 --- tricircle/tempestplugin/task_runner.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tricircle/tempestplugin/task_runner.py b/tricircle/tempestplugin/task_runner.py index 04de67ab..c215eabc 100644 --- a/tricircle/tempestplugin/task_runner.py +++ b/tricircle/tempestplugin/task_runner.py @@ -197,7 +197,7 @@ class RunnerEngine(object): self.runner = runner with open(yaml_path) as f: - data = yaml.load(f) + data = yaml.safe_load(f) self._parse_data(data) def _validate_task(self, task):