Merge pull request from GHSA-v5f6-hjmf-9mc5

iterative · Nov 28, 2023 · c57355d · c57355d
1 parent 4d83d04
commit c57355d
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/pydrive2/settings.py b/pydrive2/settings.py
@@ -2,9 +2,9 @@
 from yaml import YAMLError
 
 try:
-    from yaml import CLoader as Loader
+    from yaml import CSafeLoader as SafeLoader
 except ImportError:
-    from yaml import Loader
+    from yaml import SafeLoader
 
 SETTINGS_FILE = "settings.yaml"
 SETTINGS_STRUCT = {
@@ -114,7 +114,7 @@ def LoadSettingsFile(filename=SETTINGS_FILE):
     """
     try:
         with open(filename) as stream:
-            data = load(stream, Loader=Loader)
+            data = load(stream, Loader=SafeLoader)
     except (YAMLError, OSError) as e:
         raise SettingsError(e)
     return data