ipwnponies/dmv-appointment-scraper

yaml.load is dangerous

Closed this issue · 0 comments

return yaml.load(config_file)

Should use yaml.safe_load. Or switch to strictyaml instead, which doesn't parse python objects and have execution vulnerability.