try yaml.safe_load

scikit-hep · Mar 26, 2021 · ca0504d · ca0504d
1 parent ccf77df
commit ca0504d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/pyhf/utils.py b/src/pyhf/utils.py
@@ -55,7 +55,7 @@ def options_from_eqdelimstring(opts):
     document = '\n'.join(
         f"{opt.split('=', 1)[0]}: {opt.split('=', 1)[1]}" for opt in opts
     )
-    return yaml.full_load(document)
+    return yaml.safe_load(document)
 
 
 class EqDelimStringParamType(click.ParamType):