From 42e40ed0ab4859995264abb7ee3ba338b5e0371b Mon Sep 17 00:00:00 2001 From: Kenneth Reitz Date: Wed, 2 Nov 2011 02:35:59 -0300 Subject: [PATCH] use yaml safe_load (thanks @toastdriven) --- tablib/formats/_yaml.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tablib/formats/_yaml.py b/tablib/formats/_yaml.py index 974228b..0eab78e 100644 --- a/tablib/formats/_yaml.py +++ b/tablib/formats/_yaml.py @@ -38,7 +38,7 @@ def import_set(dset, in_stream): """Returns dataset from YAML stream.""" dset.wipe() - dset.dict = yaml.load(in_stream) + dset.dict = yaml.safe_load(in_stream) def import_book(dbook, in_stream): @@ -46,7 +46,7 @@ def import_book(dbook, in_stream): dbook.wipe() - for sheet in yaml.load(in_stream): + for sheet in yaml.safe_load(in_stream): data = tablib.Dataset() data.title = sheet['title'] data.dict = sheet['data'] @@ -55,7 +55,7 @@ def import_book(dbook, in_stream): def detect(stream): """Returns True if given stream is valid YAML.""" try: - _yaml = yaml.load(stream) + _yaml = yaml.safe_load(stream) if isinstance(_yaml, (list, tuple, dict)): return True else: