Use `yaml.safe_load` in `check-swagger-sources.py` (#3719)

pull/977/head
Andrew Morgan 3 years ago committed by GitHub
parent 0d634b1935
commit 868949908c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -89,7 +89,7 @@ def check_response(filepath, request, code, response):
def check_swagger_file(filepath): def check_swagger_file(filepath):
with open(filepath) as f: with open(filepath) as f:
swagger = yaml.load(f) swagger = yaml.safe_load(f)
for path, path_api in swagger.get('paths', {}).items(): for path, path_api in swagger.get('paths', {}).items():
@ -162,7 +162,7 @@ def load_file(path):
else: else:
# We have to assume it's YAML because some of the YAML examples # We have to assume it's YAML because some of the YAML examples
# do not have file extensions. # do not have file extensions.
return yaml.load(f) return yaml.safe_load(f)
if __name__ == '__main__': if __name__ == '__main__':

Loading…
Cancel
Save