3 ms·
Some software dealing with YAML had the ability to execute code by accident, see comment thread <https://news.ycombinator.com/item?id=22849761 https://news.ycom
by bmn__ 5y ago
Some software dealing with YAML had the ability to execute code by accident, see comment thread <https://news.ycombinator.com/item?id=22849761 https://news.ycombinator.com/item?id=22849761>.
- ViViDboarder 5y agoSure. That’s not a YAML problem as it’s not part of the spec. Someone could to the exact same thing with JSON and use a custom spec that is a string starting with a bang and executes it. I think the reason people don’t is that JSON is terrible for writing my hand and YAML isn’t.