From 9f0b3540237d59b7fa1eed514f86e9f0095a3585 Mon Sep 17 00:00:00 2001 From: James Cammarata Date: Tue, 21 Feb 2017 16:23:22 -0600 Subject: [PATCH] Use proper YAML constructor class for safe loading --- lib/ansible/parsing/yaml/constructor.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/ansible/parsing/yaml/constructor.py b/lib/ansible/parsing/yaml/constructor.py index be2c3c193b4..96ee8f1a9c0 100644 --- a/lib/ansible/parsing/yaml/constructor.py +++ b/lib/ansible/parsing/yaml/constructor.py @@ -19,7 +19,7 @@ from __future__ import (absolute_import, division, print_function) __metaclass__ = type -from yaml.constructor import Constructor, ConstructorError +from yaml.constructor import SafeConstructor, ConstructorError from yaml.nodes import MappingNode from ansible.module_utils._text import to_bytes @@ -35,7 +35,7 @@ except ImportError: display = Display() -class AnsibleConstructor(Constructor): +class AnsibleConstructor(SafeConstructor): def __init__(self, file_name=None, vault_password=None): self._vault_password = vault_password self._ansible_file_name = file_name