While it won't cover all situations, Brakeman has been updated to warn about arbitrary YAML loads: http://brakemanscanner.org/ http://brakemanscanner.org/ [ed

While it won't cover all situations, Brakeman has been updated to warn about arbitrary YAML loads: http://brakemanscanner.org/ http://brakemanscanner.org/ [edit] This is a code analyzer.