fix(core): improve security of mongodb setup script (#445)

aws · May 27, 2021 · 9148f25 · 9148f25
1 parent e7eddea
commit 9148f25
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/aws-rfdk/lib/core/scripts/mongodb/3.6/setupMongodStorage.py b/packages/aws-rfdk/lib/core/scripts/mongodb/3.6/setupMongodStorage.py
@@ -76,7 +76,7 @@ def main():
     if not os.path.isdir(storage_path):
         raise Exception("ERROR -- {storage_path} is not a directory.".format(storage_path=storage_path))
 
-    mongod_conf = yaml.load(sys.stdin)
+    mongod_conf = yaml.safe_load(sys.stdin)
     modify_storage_path(mongod_conf, storage_path)
     print(yaml.dump(mongod_conf, default_flow_style=False))