[jira] [Commented] (AIRFLOW-4338) Change k8s pod_request_factory to use yaml safe_load

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AIRFLOW-4338?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16820502#comment-16820502 ] 

ASF GitHub Bot commented on AIRFLOW-4338:
-----------------------------------------

dimberman commented on pull request #5120: [AIRFLOW-4338] Change k8s pod_request_factory to use yaml safe_load
URL: https://github.com/apache/airflow/pull/5120
 
 
   
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> Change k8s pod_request_factory to use yaml safe_load
> ----------------------------------------------------
>
>                 Key: AIRFLOW-4338
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-4338
>             Project: Apache Airflow
>          Issue Type: Improvement
>            Reporter: Felix Uellendall
>            Assignee: Felix Uellendall
>            Priority: Major
>
> Before Python yaml version 5.1 yaml has used the {{UnsafeLoader that has a potential security vulnerability. From now on there is a FullLoader}} that will be used by default that fixes these vulnerability. To suppress the warning we can explicitly set the loader.
> See [https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation] for more details.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)