Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
This displays that things are insecure even when it is only in the test environment and gives a misleading appearance that the library is insecure. Currently it complains because our tests use pyyaml and we utilize the feature to pass arbitrary code via yaml to peform tests. This is a controlled environment, and not a risk as it is only done for testing, and you'd have to alter the tests to inject bad code. If you can do that, you could just change the actual code.
- Loading branch information