From aee84fdc7376ad54f022f394524fa8ef4000808c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michael=20P=C3=B6hn?= <michael.poehn@fsfe.org>
Date: Wed, 29 Aug 2018 00:33:58 +0200
Subject: [PATCH] use yaml.safe_load for parsing metadata

---
 fdroidserver/metadata.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fdroidserver/metadata.py b/fdroidserver/metadata.py
index 8c9aa6d7..d652bee5 100644
--- a/fdroidserver/metadata.py
+++ b/fdroidserver/metadata.py
@@ -1021,7 +1021,7 @@ def parse_json_metadata(mf, app):
 
 
 def parse_yaml_metadata(mf, app):
-    yamldata = yaml.load(mf, Loader=YamlLoader)
+    yamldata = yaml.safe_load(mf)
     if yamldata:
         app.update(yamldata)
     return app