> It only concludes that a YAML may execute code. This is *intentional* - this is why people use YAML (otherwise they may use JSON) ... > 100% of the applicat

> It only concludes that a YAML may execute code. This is *intentional* - this is why people use YAML (otherwise they may use JSON) ... > 100% of the application which use SnakeYAML do not parse data from untrusted sources. Wow, what a trainwreck of a thread. I don't know Jonathan but I would love to buy him a beer. Thank you for sharing. ;)