mozilla-services/marteau — pull request #18 by rfk (2013-02-04 03:52:05+00:00)
Title: Use yaml.safe_load for config file parsing.

yaml.load() allows arbitrary code execution in the same manner as pickle, so it seems better to use yaml.safe_load() in this context.

I don't think there's an actual security issue, since the whole point of marteau is to run arbitrary code. But better safe than sorry...