storm-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Joseph Evans (JIRA)" <j...@apache.org>
Subject [jira] [Created] (STORM-223) Safe YAML Parsing
Date Fri, 07 Feb 2014 16:30:20 GMT
Robert Joseph Evans created STORM-223:
-----------------------------------------

             Summary: Safe YAML Parsing
                 Key: STORM-223
                 URL: https://issues.apache.org/jira/browse/STORM-223
             Project: Apache Storm (Incubating)
          Issue Type: Sub-task
            Reporter: Robert Joseph Evans


See http://stackoverflow.com/questions/18703632/what-can-happen-when-loading-a-yaml-file-from-an-untrusted-source-with-snakeyaml

We should use Yaml yaml = new Yaml(new SafeConstructor()); to be sure.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Mime
View raw message