38 ms·
And they warn quite clearly about that. Though in hindsight, having load and unsafe_load would have been safer.
by ArneBab 8y ago
And they warn quite clearly about that. Though in hindsight, having load and unsafe_load would have been safer.
- jwilk 8y ago> And they warn quite clearly about that. Do they? https://github.com/yaml/pyyaml https://github.com/yaml/pyyaml doesn't even mention safe_load(). And this is the docstring for yaml.load(): Parse the first YAML document in a stream and produce the corresponding Python object. This doesn't sound very scary, and certainly doesn't imply possible code execution.