Re: Unconditionally instantiates objects from yaml data
On Saturday, 11 November 2017 17:17:28 CET Dominique Dumont wrote:
> This is not an ideal solution, but is better than nothing...
Got good reasons , upstream is not thrilled about the idea of adding
SafeLoad to YAML::XS API. So I've disabled the patch.
TINITA suggests  to use unbless from Data::Structure::Util to sanitize a data
structure coming from untrusted source.
This solution is probably easier than replacing YAML::XS with YAML::TIny (which is
not always possible and behave differently with utf8)
All the best
https://github.com/dod38fr/ -o- http://search.cpan.org/~ddumont/
http://ddumont.wordpress.com/ -o- irc: dod at irc.debian.org