lib/foreplay/engine/secrets/location.rb in foreplay-0.17.0 vs lib/foreplay/engine/secrets/location.rb in foreplay-0.17.1

@@ -30,10 +30,10 @@
         end
 
         def all_secrets
           return @all_secrets if @all_secrets
 
-          @all_secrets = url ? YAML.load(raw_secrets) : {}
+          @all_secrets = url ? YAML.safe_load(raw_secrets) : {}
         rescue Psych::SyntaxError => e
           log "Exception caught when loading secrets from this location: #{url}"
           log "#{e.class}: #{e.message}".red
           @all_secrets = {}
         end