RED-32089 safe load the yaml.

According to py-yaml docs, it is not safe to call yaml.load with any data received from an untrusted source. (cherry picked from commit 91d7495)
yuvallevy2 · Sep 26, 2019 · fa88894 · fa88894
1 parent 52aa177
commit fa88894
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/log_collector.py b/log_collector.py
@@ -232,7 +232,7 @@ def get_namespace_from_config():
     if rc:
         return
 
-    config = yaml.load(out)
+    config = yaml.safe_load(out)
     current_context = config.get('current-context')
     if not current_context:
         return