summaryrefslogtreecommitdiff
blob: 5c1bf6129fe08029377dcccbe9687b7cd7523d4e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
diff --git a/clay/settings.py b/clay/settings.py
index db31473ee590..1d3e504f14bd 100644
--- a/clay/settings.py
+++ b/clay/settings.py
@@ -83,17 +83,17 @@ class _Settings(object):
         Read config from file.
         """
         with open(self._config_file_path, 'r') as settings_file:
-            self._config = yaml.load(settings_file.read())
+            self._config = yaml.safe_load(settings_file.read())
 
         # Load the configuration from Setuptools' ResourceManager API
-        self._default_config = yaml.load(pkg_resources.resource_string(__name__, "config.yaml"))
+        self._default_config = yaml.safe_load(pkg_resources.resource_string(__name__, "config.yaml"))
 
         # We only either the user colour or the default colours to ease parsing logic.
         if os.path.exists(self._colours_file_path):
             with open(self._colours_file_path, 'r') as colours_file:
-                self.colours_config = yaml.load(colours_file.read())
+                self.colours_config = yaml.safe_load(colours_file.read())
         else:
-            self.colours_config = yaml.load(pkg_resources.resource_string(__name__, "colours.yaml"))
+            self.colours_config = yaml.safe_load(pkg_resources.resource_string(__name__, "colours.yaml"))
 
 
     def _load_cache(self):
@@ -111,7 +111,7 @@ class _Settings(object):
         """
         self._config.update(config)
         with open(self._config_file_path, 'w') as settings_file:
-            settings_file.write(yaml.dump(self._config, default_flow_style=False))
+            settings_file.write(yaml.safe_dump(self._config, default_flow_style=False))
 
     def get(self, key, *sections):
         """