Stone_Red/dvc
1
0
Fork 0
mirror of https://github.com/Stone-Red-Code/dvc.git synced 2026-11-07 15:28:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

yaml: use safe_load and safe_dump

Browse Source 
We don't need to support python objects in our dvc files,
so we should only use safe_ functionality to avoid possible
bugs when entries in dvc files are represented as py objects.

Fixes #372
This commit is contained in:
Ruslan Kuprieiev
2018-01-04 13:34:31 +02:00
parent b4658c23ce
commit 9bec404efa
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dvc/stage.py
+2 -2
View File
@@ -247,7 +247,7 @@ class Stage(object):
@staticmethod
def load(project, fname):
with open(fname, 'r') as fd:
return Stage.loadd(project, yaml.load(fd), fname)
return Stage.loadd(project, yaml.safe_load(fd), fname)
def dumpd(self):
deps = [x.dumpd(self.cwd) for x in self.deps]
@@ -265,7 +265,7 @@ class Stage(object):
fname = self.path
with open(fname, 'w') as fd:
yaml.dump(self.dumpd(), fd, default_flow_style=False)
yaml.safe_dump(self.dumpd(), fd, default_flow_style=False)
def save(self):
for dep in self.deps: