[codegen] Switch from yaml.load to yaml.safe_load (grpc#33275)

makesoftwaresafe · May 30, 2023 · ba3a5d7 · ba3a5d7
1 parent b103379
commit ba3a5d7
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/tools/codegen/core/gen_config_vars.py b/tools/codegen/core/gen_config_vars.py
@@ -29,7 +29,7 @@
 import yaml
 
 with open('src/core/lib/config/config_vars.yaml') as f:
-    attrs = yaml.load(f.read(), Loader=yaml.FullLoader)
+    attrs = yaml.safe_load(f.read(), Loader=yaml.FullLoader)
 
 error = False
 today = datetime.date.today()

diff --git a/tools/codegen/core/gen_stats_data.py b/tools/codegen/core/gen_stats_data.py
@@ -25,7 +25,7 @@
 import yaml
 
 with open('src/core/lib/debug/stats_data.yaml') as f:
-    attrs = yaml.load(f.read(), Loader=yaml.Loader)
+    attrs = yaml.safe_load(f.read(), Loader=yaml.Loader)
 
 REQUIRED_FIELDS = ['name', 'doc']