In our use case, we are *not* reading arbitrary input that could be malicious. Still, because we know that what we're reading is made up of only dictionaries and lists and not arbitrary Python objects, we might as well use the more restrictive `safe_load` function rather than the `load` function.pull/45/merge v1.6.1
parent
dcc3a1947a
commit
4381c4cabb
Loading…
Reference in new issue