4 ms·
YAML IS INSECURE. Your parser might not support instantiating arbitrary objects, but those your programs interact with might... :( Anyone else recall the prob
by willvarfar 12y ago
YAML IS INSECURE.
Your parser might not support instantiating arbitrary objects, but those your programs interact with might... :(
Anyone else recall the problems with YAML vulnerabilities? An old blog post by me: http://williamedwardscoder.tumblr.com/post/43394068341/rubys-principle-of-too-much-power http://williamedwardscoder.tumblr.com/post/43394068341/rubys...
So never ever use YAML for tainted input.