News for hackers. Stuff that matters.
Re:YAML: probably not so great after all (2017) by zmmmmm on Wednesday June 20, 2018 @07:58PM (#17360986)
Because it's just in general incredibly short sighted to think that your config file is never going to be read by code written in another language.

There's also an argument about whether making configuration files able to execute arbitrary code is a good idea. You get straight into the JavaScript 'eval' problems which we've spent a decade escaping.

Re:YAML: probably not so great after all (2017) by dcbadacd on Thursday June 21, 2018 @02:54AM (#17362728)
Arbitrary code execution in configuration files has caused a few vulnerabilities in Wordpress extensions already, so yes, it's a terrible idea.