3 ms·
I have never, ever, not even once, in my 8 years working with rails had to call YAML.load myself in an app. Changing how Rails or other libs process YAML is a
by knowtheory 14y ago
I have never, ever, not even once, in my 8 years working with rails had to call YAML.load myself in an app.
Changing how Rails or other libs process YAML is a behavior that can and should be performed transparently to users. And besides, most people processing user input aren't accepting YAML. It is extremely weird that Rails was accepting YAML in XML requests. It is slightly more understandable that Rails was using a YAML parser to parse JSON (although not a good idea as we've seen). But by and large, if you have an API that accepts user data, standard practice is to parse JSON, not YAML.
Your analogy is not correct.
- SilasX 14y agoI never thought I'd see "Rails" and "transparent" in the same sentence...