tinita

4 ms·

1. 1.▲
   by tinita 5y ago

   That's because PyYAML doesn't implement the spec correctly.
2. 2.▲
   by tinita 5y ago

   Have a closer look. The 1024 limit in version 1.2 is only for implicit block mapping keys, not for flow style `{"foo": "bar"}`
3. 3.▲
   by tinita 9y ago

   "the cpan version maintained by this person is still vulnerable" In our github discussion you admitted that it is not vulnerable if you disable loading objects, which is possible since version 0.69. (Because of backwards compatibi
4. 4.▲
   by tinita 9y ago

   I got a helpful reply from jwilk that shows why unbless() can still be exploitable. I will edit my article.
5. 5.▲
   by tinita 9y ago

   YAML::XS 0.69 does not bless objects anymore if you use $LoadBlessed = 0, just like you can do in YAML::Syck. That's what I wrote in the article. Unblessing objects afterwards is simply the last resort, and if you do it directly after
6. 6.▲
   by tinita 10y ago

   I'm using git-hub as well and I find it very DWIM and more complete. (Have to add that I'm also a collaborator now, so maybe a bit biased) I couldn't figure out how to use git-repo. When I figured out which command I have to
7. 7.▲
   by tinita 10y ago

   Thoughts: 1. Where will the energy come from? 2. While electric cars will make the air in cities better, they won't reduce the needed space (for driving AND parking), and they won't make life more secure for pedestrians and cyclis