mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
* lib/yaml.rb: add security warning to YAML documentation
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@40500 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
parent
3e1fad843e
commit
b5e8e33ddc
2 changed files with 8 additions and 0 deletions
|
@ -1,3 +1,7 @@
|
|||
Sat Apr 27 23:53:00 2013 Charlie Somerville <charlie@charliesomerville.com>
|
||||
|
||||
* lib/yaml.rb: add security warning to YAML documentation
|
||||
|
||||
Sat Apr 27 23:25:00 2013 Zachary Scott <zachary@zacharyscott.net>
|
||||
|
||||
* lib/yaml.rb: Documentation for YAML module [Bug #8213]
|
||||
|
|
|
@ -73,6 +73,10 @@ end
|
|||
# YAML.dump("foo") # => "--- foo\n...\n"
|
||||
# { :a => 'b'}.to_yaml # => "---\n:a: b\n"
|
||||
#
|
||||
# Do not use YAML to load untrusted data. Doing so is unsafe and could allow
|
||||
# malicious input to execute arbitrary code inside your application. Please see
|
||||
# doc/security.rdoc for more information.
|
||||
#
|
||||
# For more advanced details on the implementation see Psych, and also check out
|
||||
# yaml.org for spec details and other helpful information.
|
||||
module YAML; end
|
||||
|
|
Loading…
Reference in a new issue