./textproc/ruby-safe_yaml, Parse YAML safely

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2015Q3, Version: 1.0.4, Package name: ruby200-safe_yaml-1.0.4, Maintainer: pkgsrc-users

The SafeYAML gem provides an alternative implementation of `YAML.load`
suitable for accepting user input in Ruby applications. Unlike Ruby's
built-in implementation of `YAML.load`, SafeYAML's version will not expose
apps to arbitrary code execution exploits (such as [the ones
discovered](http://www.reddit.com/r/netsec/comments/167c11/serious_vulnerability_in_ruby_on_rails_allowing/)
[in Rails in early
2013](http://www.h-online.com/open/news/item/Rails-developers-close-another-extremely-critical-flaw-1793511.html)).

If you encounter any issues with SafeYAML, check out the 'Common Issues'
section below. If you don't see anything that addresses the problem you're
experiencing, by all means, [create an
issue](https://github.com/dtao/safe_yaml/issues/new)!


Required to run:
[lang/ruby200-base]

Master sites:

SHA1: b42af3b12aca32cc7072694e39c0a54d7d80f9d0
RMD160: a71cc7c1f6b751e35d3093ebfab52a117c73384b
Filesize: 29.5 KB

Version history: (Expand)