From e7a34807f732746a0e37ec608f40cfa56dff5aed Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michael=20P=C3=B6hn?= <michael.poehn@fsfe.org>
Date: Wed, 29 Aug 2018 00:33:58 +0200
Subject: [PATCH] use yaml.safe_load for parsing metadata

---
 fdroidserver/metadata.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fdroidserver/metadata.py b/fdroidserver/metadata.py
index a5466078..7bf1fbe0 100644
--- a/fdroidserver/metadata.py
+++ b/fdroidserver/metadata.py
@@ -1073,7 +1073,7 @@ def parse_json_metadata(mf, app):
 
 
 def parse_yaml_metadata(mf, app):
-    yamldata = yaml.load(mf, Loader=YamlLoader)
+    yamldata = yaml.safe_load(mf)
 
     if yamldata:
         for field in yamldata: