[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc-2014Q4 2014-03-14T18:27:35Z 2014-03-14T18:27:35Z taca taca@pkgsrc.org 2014-03-14T18:27:35Z urn:sha1:10c348bab329055d3a745cce5e39b8fd132e11c3 0.9.7 * made handling of document frontmatter more robust * added more descriptive message to the warning for omitting the :safe option 0.9.6 * fixed handling of files with trailing content (after closing ---) For more detail, please refer <https://github.com/dtao/safe_yaml/commits/master>. 2013-09-15T16:31:27Z taca taca@pkgsrc.org 2013-09-15T16:31:27Z urn:sha1:aeefbb98782c5f59c1ecf6be74febf980abb77a5 The SafeYAML gem provides an alternative implementation of `YAML.load` suitable for accepting user input in Ruby applications. Unlike Ruby's built-in implementation of `YAML.load`, SafeYAML's version will not expose apps to arbitrary code execution exploits (such as [the ones discovered](http://www.reddit.com/r/netsec/comments/167c11/serious_vulnerability_in_ruby_on_rails_allowing/) [in Rails in early 2013](http://www.h-online.com/open/news/item/Rails-developers-close-another-extremely-critical-flaw-1793511.html)). If you encounter any issues with SafeYAML, check out the 'Common Issues' section below. If you don't see anything that addresses the problem you're experiencing, by all means, [create an issue](https://github.com/dtao/safe_yaml/issues/new)!