-
Notifications
You must be signed in to change notification settings - Fork 25
Closed
Labels
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomers
Description
Replace yaml.dump and yaml.load with yaml.safe_dump and yaml.safe_load to avoid emitting and parsing Python-specific object tags. This improves security (prevents arbitrary object construction on load) and ensures YAML files remain portable and standards-compliant while it should still be working well for our use case as we only need standard Python objects in our meta files.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomers