]> git.decadent.org.uk Git - dak.git/commit
use yaml.safe_{load,dump} functions
authorAnsgar Burchardt <ansgar@debian.org>
Sun, 29 Sep 2013 20:57:42 +0000 (22:57 +0200)
committerAnsgar Burchardt <ansgar@debian.org>
Sun, 29 Sep 2013 20:57:42 +0000 (22:57 +0200)
commit01ebf813c5f67f5b6e83e055a803784548a78603
tree996d519051a1cad3602118c97ad566a136c6a92f
parent9577d0bfe2d33afc1033f4b571a50fb7c980de6b
use yaml.safe_{load,dump} functions

The yaml.load() function can run arbitrary code, the safe_load() variant only
understands a safe subset of YAML which is enough for dak.
dak/stats.py
dak/transitions.py
daklib/checks.py
daklib/queue.py