projects / mudpy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7e08337) | patch
Switch to yaml.safe_load for better security
authorJeremy Stanley <fungi@yuggoth.org>
Sat, 18 Apr 2015 06:54:07 +0000 (06:54 +0000)
committerJeremy Stanley <fungi@yuggoth.org>
Sat, 18 Apr 2015 06:54:07 +0000 (06:54 +0000)
commit8b359fa7e7fbac92821a835896a80abde06db4ce
tree6e999c474f6abfc52b3dee27393d5e93810734b0tree | snapshot
parent7e08337e078efd9ecf09b69bfbb093c50487d528commit | diff
Switch to yaml.safe_load for better security

Use the yaml.safe_load to avoid unwanted privilege escalation due to
deserializing unsafe objects. Also switch to yaml.safe.dump for
symmetry, so that we don't write out files we'll later refuse to
parse.
lib/mudpy/data.py diff | blob | history
The mudpy MUD server engine.