[SECURITY-1736]

jenkinsci · Apr 14, 2020 · 6ddcb02 · 6ddcb02
1 parent cd39d25
commit 6ddcb02
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/pom.xml b/pom.xml
@@ -79,7 +79,7 @@
 		<dependency>
 			<groupId>org.yaml</groupId>
 			<artifactId>snakeyaml</artifactId>
-			<version>1.21</version>
+			<version>1.26</version>
 		</dependency>
 		<dependency>
 			<groupId>org.json</groupId>

diff --git a/src/main/java/com/amazonaws/jenkins/plugins/sam/util/IntrinsicsYamlConstructor.java b/src/main/java/com/amazonaws/jenkins/plugins/sam/util/IntrinsicsYamlConstructor.java
@@ -8,7 +8,7 @@
 import java.util.Map;
 
 import org.yaml.snakeyaml.constructor.AbstractConstruct;
-import org.yaml.snakeyaml.constructor.Constructor;
+import org.yaml.snakeyaml.constructor.SafeConstructor;
 import org.yaml.snakeyaml.error.YAMLException;
 import org.yaml.snakeyaml.nodes.MappingNode;
 import org.yaml.snakeyaml.nodes.Node;
@@ -22,7 +22,7 @@
  * 
  * @author Trek10, Inc.
  */
-public class IntrinsicsYamlConstructor extends Constructor {
+public class IntrinsicsYamlConstructor extends SafeConstructor {
     public IntrinsicsYamlConstructor() {
         addIntrinsic("And");
         addIntrinsic("Base64");