NotAShelf/Basix
1
0
Fork 0
mirror of https://github.com/NotAShelf/Basix.git synced 2026-06-23 21:23:23 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

convert-scheme: do not allow arbitrary python code execution

Browse source 
Probably not relevant, but there doesn't seem to be a reason
to use the full loader as far as I can tell...
This commit is contained in:
alfarel 2026-05-25 22:24:03 -04:00
commit 6a8a32d3a8
No known key found for this signature in database
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
packages/convert-scheme/package.nix
View file

@ -9,7 +9,7 @@ pkgs.writers.writePython3Bin "convert-scheme" {
def yaml_to_json(yaml_file, json_file): def yaml_to_json(yaml_file, json_file):
with open(yaml_file, 'r') as yml_file: with open(yaml_file, 'r') as yml_file:
data = yaml.load(yml_file, Loader=yaml.FullLoader) data = yaml.safe_load(yml_file)
with open(json_file, 'w') as json_file: with open(json_file, 'w') as json_file:
json.dump(data, json_file, indent=4) json.dump(data, json_file, indent=4)