Merge branch 'safe_yaml_parsing' into 'master'

use yaml.safe_load for parsing metadata

See merge request fdroid/fdroidserver!565
This commit is contained in:
Hans-Christoph Steiner 2018-08-29 07:37:43 +00:00
commit 6b3cf72b68

View file

@ -1073,7 +1073,7 @@ def parse_json_metadata(mf, app):
def parse_yaml_metadata(mf, app):
yamldata = yaml.load(mf, Loader=YamlLoader)
yamldata = yaml.safe_load(mf)
if yamldata:
for field in yamldata: