That's because PyYAML doesn't implement the spec correctly.
Have a closer look. The 1024 limit in version 1.2 is only for implicit block mapping keys, not for flow style `{"foo": "bar"}`
"the cpan version maintained by this person is still vulnerable" In our github discussion you admitted that it is not vulnerable if you disable loading objects, which is possible since version 0.69. (Because of…
I got a helpful reply from jwilk that shows why unbless() can still be exploitable. I will edit my article.
YAML::XS 0.69 does not bless objects anymore if you use $LoadBlessed = 0, just like you can do in YAML::Syck. That's what I wrote in the article. Unblessing objects afterwards is simply the last resort, and if you do it…
I'm using git-hub as well and I find it very DWIM and more complete. (Have to add that I'm also a collaborator now, so maybe a bit biased) I couldn't figure out how to use git-repo. When I figured out which command I…
Thoughts: 1. Where will the energy come from? 2. While electric cars will make the air in cities better, they won't reduce the needed space (for driving AND parking), and they won't make life more secure for pedestrians…
That's because PyYAML doesn't implement the spec correctly.
Have a closer look. The 1024 limit in version 1.2 is only for implicit block mapping keys, not for flow style `{"foo": "bar"}`
"the cpan version maintained by this person is still vulnerable" In our github discussion you admitted that it is not vulnerable if you disable loading objects, which is possible since version 0.69. (Because of…
I got a helpful reply from jwilk that shows why unbless() can still be exploitable. I will edit my article.
YAML::XS 0.69 does not bless objects anymore if you use $LoadBlessed = 0, just like you can do in YAML::Syck. That's what I wrote in the article. Unblessing objects afterwards is simply the last resort, and if you do it…
I'm using git-hub as well and I find it very DWIM and more complete. (Have to add that I'm also a collaborator now, so maybe a bit biased) I couldn't figure out how to use git-repo. When I figured out which command I…
Thoughts: 1. Where will the energy come from? 2. While electric cars will make the air in cities better, they won't reduce the needed space (for driving AND parking), and they won't make life more secure for pedestrians…