Hacker GitHub

← All repos

dtao/safe_yaml

View on GitHub ↗ ★ 218 Ruby

Parse YAML safely

5 mentions on Hacker News by 5 people: 1 story, 4 comments · first 2013-01-31 · latest 2014-03-02

Mentions per year 5 mentions · busiest year 2013 (4)
20082026
AllStoriesComments NewestTopOldest
  1. …or extra modules included like SafeYAML[1] to keep Yaml from instantiating arbitrary objects. [1] https://github.com/dtao/safe_yaml
    comment by harshreality · 2014-03-02 · in JSON5 is a proposed extension to JSON
  2. …source. Buffer overflows aren't intentional, but uses of strcat are, even when they are wrong. 1. https://github.com/dtao/safe_yaml
    comment by sanderjd · 2013-02-08 · in Libcurl remote code execution
  3. …Rails people have a look at safe_yaml which (now) replaces YAML.load by a safe (safer?) version: https://github.com/dtao/safe_yaml (nb: I've enable it on apps without issues)
    comment by thibaut_barrere · 2013-02-03 · in On Python security amidst recent Rails/YAML vulnerabilities
  4. ▲ 5
    Safe YAML for Ruby
    story by bradly · 2013-01-31 · 0 comments
  5. This is currently being discussed on https://github.com/tenderlove/psych/issues/119 There is also https://github.com/dtao/safe_yaml (hat tip @patio11, who also points out that this has not been audited for completeness/correctness)
    comment by trapexit · 2013-01-31 · in What The Rails Security Issue Means For Your Startup