Bug#862373: solved upstream: Unconditionally instantiates objects from yaml data

2018-02-27 Thread Dominique Dumont
TINITA explains in this post how safely use YAML in Perl: http://blogs.perl.org/users/tinita/2018/02/safely-load-untrusted-yaml-in-perl.html HTH

Bug#862373: solved upstream: Unconditionally instantiates objects from yaml data

2018-01-10 Thread Dominique Dumont
Hi Good news: object creation can now be disabled starting from YAML::XS 0.69. That said, the default behavior is unchanged (which is reasonable). This means that any application loading untrusted YAML data must be modified to set $YAML::XS::LoadBlessed to 0 before loading YAML files. I guess