Re:Safely load untrusted YAML in Perl
by tinita on Friday March 09, 2018 @05:15AM
(#16550857)
YAML::XS 0.69 does not bless objects anymore if you use $LoadBlessed = 0, just like you can do in YAML::Syck.
That's what I wrote in the article.
Unblessing objects afterwards is simply the last resort, and if you do it directly after loading, it should make the process quite safe. That's why I mentioned it. Unblessing via the method I mentioned will prevent it from calling DESTROY methods.
That's what I wrote in the article.
Unblessing objects afterwards is simply the last resort, and if you do it directly after loading, it should make the process quite safe. That's why I mentioned it. Unblessing via the method I mentioned will prevent it from calling DESTROY methods.
So I don't understand your problem.