more places to use yaml.safe_load

lib/ansible/runner/filter_plugins/core.py

@@ -26,6 +26,6 @@ class FilterModule(object):
             'to_json': json.dumps,
             'from_json': json.loads,
             'to_yaml': yaml.safe_dump,
-            'from_yaml': yaml.load,
+            'from_yaml': yaml.safe_load,
         }
     

lib/ansible/utils/module_docs.py

@@ -45,7 +45,7 @@ def get_docstring(filename, verbose=False):
         for child in M.body:
             if isinstance(child, ast.Assign):
                 if 'DOCUMENTATION' in (t.id for t in child.targets):
-                    doc = yaml.load(child.value.s)
+                    doc = yaml.safe_load(child.value.s)
                 if 'EXAMPLES' in (t.id for t in child.targets):
                     plainexamples = child.value.s[1:]  # Skip first empty line
     except:

library/git

@@ -160,7 +160,7 @@ def get_head_branch(module, dest, remote):
     # Check if the .git is a file. If it is a file, it means that we are in a submodule structure.
     if os.path.isfile(repo_path):
         try:
-            gitdir = yaml.load(open(repo_path)).get('gitdir')
+            gitdir = yaml.safe_load(open(repo_path)).get('gitdir')
             # There is a posibility the .git file to have an absolute path.
             if os.path.isabs(gitdir):
                 repo_path = gitdir

plugins/inventory/yaml.py

@@ -226,7 +226,7 @@ base_dir = os.path.dirname(os.path.realpath(__file__))
 hosts_file = os.path.join(base_dir, 'hosts.yml')
 
 with open(hosts_file) as f:
-    yaml_hosts = yaml.load( f.read() )
+    yaml_hosts = yaml.safe_load( f.read() )
 
 groups, all_hosts = parse_yaml(yaml_hosts)