SafeLoader and custom tags
Devin Jeanpierre <[email protected]>
| Newsgroups | gmane.text.yaml.general |
|---|---|
| Message-ID | <[email protected]> |
The documentation mentioned that SafeLoader only used the standard tags, but I guess I didn't take that seriously; it came as a bit of a surprise when yaml.safe_load didn't load tags I'd added using yaml.add_constructor. Is there no middle ground between allowing users to call arbitrary callables and only allowing users to create a select few types? I need the security of not unpickling things by accident, but very much want to use my own tags. Devin Jeanpierre ------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/blackberry