3 ms·
> And they warn quite clearly about that. Do they? https://github.com/yaml/pyyaml https://github.com/yaml/pyyaml doesn't even mention safe_load(). And this i
by jwilk 8y ago
> And they warn quite clearly about that.
Do they?
https://github.com/yaml/pyyaml https://github.com/yaml/pyyaml doesn't even mention safe_load().
And this is the docstring for yaml.load():
Parse the first YAML document in a stream
and produce the corresponding Python object.
This doesn't sound very scary, and certainly doesn't imply possible code execution.