textproc/ruby-safe_yaml 1.0.5 NetBSD
Parse YAML safely
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- mit
- Categories
- textproc, ruby
- Package size
- 67.1 KiB, 168.5 KiB installed
Description
The SafeYAML gem provides an alternative implementation of `YAML.load` suitable for accepting user input in Ruby applications. Unlike Ruby's built-in implementation of `YAML.load`, SafeYAML's version will not expose apps to arbitrary code execution exploits (such as [the ones discovered](http://www.reddit.com/r/netsec/comments/167c11/serious_vulnerability_in_ruby_on_rails_allowing/) [in Rails in early 2013](http://www.h-online.com/open/news/item/Rails-developers-close-another-extremely-critical-flaw-1793511.html)).
If you encounter any issues with SafeYAML, check out the 'Common Issues' section below. If you don't see anything that addresses the problem you're experiencing, by all means, [create an issue](https://github.com/dtao/safe_yaml/issues/new)!
Install
Binary package:
pkgin install ruby33-safe_yaml
From pkgsrc:
cd /usr/pkgsrc/textproc/ruby-safe_yaml && make install clean
Dependencies
Run dependencies 1
Required by 1
Configuration
No options to configure.
- Service scripts
- none
- Flavors
ruby34-safe_yaml-1.0.5,ruby40-safe_yaml-1.0.5