зеркало из https://github.com/mozilla/gecko-dev.git
3f4ac974d3
yaml.load() can evaluate arbitrary Python code via syntax such as `!!python/object/apply:os.system`. Seriously. Let's switch taskgraph to yaml.safe_load(), which is reasonable about limiting magic. Differential Revision: https://phabricator.services.mozilla.com/D1736 |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| decision.py | ||
| schema.py | ||
| util.py | ||