change yaml.load to yaml.safe_load

Thanks to @SEJeff for the heads-up.
Merge pull request #3246 from archtaku/quickfix

change yaml.load to yaml.safe_load