[issue44757] Insecure Deserialization

[Steven D'Aprano]

Steven D'Aprano <steve+python at pearwood.info> added the comment:

Hi Joker.

Please don't post screenshots and images of code. It is difficult or impossible for the visually impaired and blind to view with a screen reader, and as we don't use Photoshop to edit code, it makes it hard to copy and run the code.

Your code is full of syntax errors. Out of three lines of code, I count that two of them will fail with a SyntaxError and the third is probably going to fail with ImportError.

What if, instead of calling `yaml.load`, I use something like `from yaml import load` or `import yaml as y` instead?

----------
nosy: +steven.daprano

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue44757>
_______________________________________