Always use a Loader in yaml.load (#745)

A recent change within pyyaml 6.0 has enforce use of a Loader argument to yaml.load [1]. To comply, Bandit will use yaml.load with a Loader always. The plugin to check for unsafe loaders of yaml module still applies. [1] yaml/pyyaml#561 Closes #744 Signed-off-by: Eric Brown <[email protected]>
PyCQA · Oct 24, 2021 · aac3f16 · aac3f16
1 parent 44f5c41
commit aac3f16
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tests/unit/formatters/test_yaml.py b/tests/unit/formatters/test_yaml.py
@@ -70,7 +70,7 @@ def test_report(self, get_issue_list):
                           self.issue.confidence)
 
         with open(self.tmp_fname) as f:
-            data = yaml.load(f.read())
+            data = yaml.load(f.read(), Loader=yaml.SafeLoader)
             self.assertIsNotNone(data['generated_at'])
             self.assertEqual(self.tmp_fname, data['results'][0]['filename'])
             self.assertEqual(self.issue.severity,