Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on JSON vs. YAML – try it yourself.
Your parser might not support instantiating arbitrary objects, but those your programs interact with might... :(
Anyone else recall the problems with YAML vulnerabilities? An old blog post by me: http://williamedwardscoder.tumblr.com/post/43394068341/rubys...
So never ever use YAML for tainted input.
There are no comments on this comment yet.
Your parser might not support instantiating arbitrary objects, but those your programs interact with might... :(
Anyone else recall the problems with YAML vulnerabilities? An old blog post by me: http://williamedwardscoder.tumblr.com/post/43394068341/rubys...
So never ever use YAML for tainted input.