projects / mudpy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 19558d3) | patch
Switch to yaml.safe_load for better security
authorJeremy Stanley <fungi@yuggoth.org>
Sat, 18 Apr 2015 06:54:07 +0000 (06:54 +0000)
committerJeremy Stanley <fungi@yuggoth.org>
Sat, 18 Apr 2015 06:54:07 +0000 (06:54 +0000)
commit7e78772b5ba2efbb84710db0ecd540c9b745217a
tree6e999c474f6abfc52b3dee27393d5e93810734b0tree | snapshot
parent19558d35ce08fb9df044b3c9569eb66e7b3e6f9ecommit | diff
Switch to yaml.safe_load for better security

Use the yaml.safe_load to avoid unwanted privilege escalation due to
deserializing unsafe objects. Also switch to yaml.safe.dump for
symmetry, so that we don't write out files we'll later refuse to
parse.
lib/mudpy/data.py diff | blob | history
The mudpy MUD server engine.