Tenderlove on Rails security exploits(tenderlovemaking.com)

http://tenderlovemaking.com/2013/02/06/yaml-f7u12.html

3 comments

  "Think of YAML as a human readable Marshal."

That's what people missed. YAML is a marshaling format, full stop. The Ruby community has to absorb this idea, and quickly, because YAML is everywhere.

bloodberet13년 전

Great blog post and it's explaining the problem and possible solutions.

tbrock13년 전

Aaron Patterson just rocks, what a great explanation.