5 commits

Author	SHA1	Message	Date
Aaron Patterson	c7c2ad5749	[ruby/psych] Introduce Psych.unsafe_load ... In future versions of Psych, the `load` method will be mostly the same as the `safe_load` method. In other words, the `load` method won't allow arbitrary object deserialization (which can be used to escalate to an RCE). People that need to load *trusted* documents can use the `unsafe_load` method. This commit introduces the `unsafe_load` method so that people can incrementally upgrade. For example, if they try to upgrade to 4.0.0 and something breaks, they can downgrade, audit callsites, change to `safe_load` or `unsafe_load` as required, and then upgrade to 4.0.0 smoothly. https://github.com/ruby/psych/commit/cb50aa8d3f	2021-05-17 11:20:45 +09:00
Jean Boussier	c110ade0d2	[ruby/psych] Fix custom marshalization with symbolize_names: true ... https://github.com/ruby/psych/commit/ee26f26ab5	2021-05-10 19:17:32 +09:00
hsbt	0b396d5880	Merge psych-3.0.0.beta3 from ruby/psych. ... * Rely on encoding tags to determine if string should be dumped as binary. 8949a47b8c * Specify "frozen_string_literal: true". * Support to binary release for mingw32 platform. git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@59327 b2dd03c8-39d4-4d8f-98ff-823fe69b080e	2017-07-14 06:15:58 +00:00
naruse	3e92b635fb	Add frozen_string_literal: false for all files ... When you change this to true, you may need to add more tests. git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@53141 b2dd03c8-39d4-4d8f-98ff-823fe69b080e	2015-12-16 05:07:31 +00:00
tenderlove	12396fda40	* ext/psych/lib/psych/visitors/to_ruby.rb: support objects that are ... marshalable, but inherit from basic object. Thanks Sean Griffin <sean@thoughtbot.com> * ext/psych/lib/psych/visitors/yaml_tree.rb: ditto * test/psych/test_marshalable.rb: test for fix git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@48675 b2dd03c8-39d4-4d8f-98ff-823fe69b080e	2014-12-01 21:35:11 +00:00