FFMQ: fix remote code execution (#4786)

This commit is contained in:
Fabian Dill
2025-04-01 18:19:07 +02:00
committed by GitHub
parent ca08e4b950
commit bb6c753583

View File

@@ -3,7 +3,6 @@ import settings
import base64 import base64
import threading import threading
import requests import requests
import yaml
from worlds.AutoWorld import World, WebWorld from worlds.AutoWorld import World, WebWorld
from BaseClasses import Tutorial from BaseClasses import Tutorial
from .Regions import create_regions, location_table, set_rules, stage_set_rules, rooms, non_dead_end_crest_rooms,\ from .Regions import create_regions, location_table, set_rules, stage_set_rules, rooms, non_dead_end_crest_rooms,\
@@ -134,7 +133,7 @@ class FFMQWorld(World):
errors.append([api_url, err]) errors.append([api_url, err])
else: else:
if response.ok: if response.ok:
world.rooms = rooms_data[query] = yaml.load(response.text, yaml.Loader) world.rooms = rooms_data[query] = Utils.parse_yaml(response.text)
break break
else: else:
api_urls.remove(api_url) api_urls.remove(api_url)