-
- Downloads
Fix bug: fix error for Psych 4.0.0 or later
If the version of Psych was 4.0.0 or later, an error occurred
with hookcc.
Even a simple example like this will cause an error:
$ ./outvoke.rb -e 'hookcc("every-sec") { e }'
This bug appeared in version 0.0.99.20241123 (1c328546).
Outvoke used Object#to_yaml and YAML.load for deep copying.
This commit makes the change to use YAML.unsafe_load instead of
YAML.load.
Since YAML.unsafe_load is executed immediately after executing
Object#to_yaml, the security risk is considered small. However,
please note that this has not been carefully verified to ensure
it is safe in all cases.
In Outvoke, the approach for deep copying may be radically
changed in the future.
Please register or sign in to comment