Use yaml safe_load

Author: ben-edna

dfetch_hub/project/project_parser.py

@@ -40,7 +40,7 @@ def from_yaml(cls, yaml_file: str) -> "ProjectParser":
         """create parser from yaml file"""
         with open(yaml_file, "r", encoding="utf-8") as yamlf:
             instance = cls()
-            yaml_data = yaml.load(yamlf.read(), Loader=yaml.Loader)
+            yaml_data = yaml.safe_load(yamlf.read())
             for project in yaml_data["projects"]:
                 parsed_project = RemoteProject.from_yaml(project)
                 instance.add_project(parsed_project)

dfetch_hub/project/project_sources.py

@@ -76,7 +76,7 @@ def from_yaml(cls, yaml_data: Union[str, bytes]) -> "SourceList":
 
         instance = cls()
 
-        parsed_yaml: Optional[Dict[str, Any]] = yaml.load(yaml_data, Loader=yaml.Loader)
+        parsed_yaml: Optional[Dict[str, Any]] = yaml.safe_load(yaml_data)
         if not parsed_yaml:
             raise RuntimeError("file should have data")
         assert parsed_yaml["source-list"], "file should have list of sources"