Python: Adjust getARelevantTag

This commit is contained in:
Rasmus Lerchedahl Petersen
2020-10-14 08:44:04 +02:00
parent 3b9ea3a958
commit a76d276b48
5 changed files with 11 additions and 8 deletions

View File

@@ -41,6 +41,9 @@ private module Yaml {
/**
* A call to `yaml.load`
* See https://pyyaml.org/wiki/PyYAMLDocumentation (you will have to scroll down).
*
* This function was briefly thought safe until new exploits were found in 2020,
* see https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation for details.
*/
private class YamlDeserialization extends UnmarshalingFunction::Range {
YamlDeserialization() {