improved yaml config

hhund · hhund · commit e0b6cf00ab6d · 2026-03-24T15:15:39.000+01:00
diff --git a/dsf-common/dsf-common-auth/src/main/java/dev/dsf/common/auth/conf/RoleConfigReader.java b/dsf-common/dsf-common-auth/src/main/java/dev/dsf/common/auth/conf/RoleConfigReader.java
@@ -20,7 +20,9 @@
 import java.util.function.Function;
 
 import org.hl7.fhir.r4.model.Coding;
+import org.yaml.snakeyaml.LoaderOptions;
 import org.yaml.snakeyaml.Yaml;
+import org.yaml.snakeyaml.constructor.SafeConstructor;
 
 import dev.dsf.common.auth.conf.RoleConfig.DsfRoleFactory;
 
@@ -50,6 +52,6 @@ public <R extends DsfRole> RoleConfig<R> read(InputStream config, DsfRoleFactory
 
 	protected Yaml yaml()
 	{
-		return new Yaml();
+		return new Yaml(new SafeConstructor(new LoaderOptions()));
 	}
 }

Original file line number	Diff line number	Diff line change
`@@ -20,7 +20,9 @@`
`20`	`20`	`import java.util.function.Function;`
`21`	`21`
`22`	`22`	`import org.hl7.fhir.r4.model.Coding;`
	`23`	`+import org.yaml.snakeyaml.LoaderOptions;`
`23`	`24`	`import org.yaml.snakeyaml.Yaml;`
	`25`	`+import org.yaml.snakeyaml.constructor.SafeConstructor;`
`24`	`26`
`25`	`27`	`import dev.dsf.common.auth.conf.RoleConfig.DsfRoleFactory;`
`26`	`28`
`@@ -50,6 +52,6 @@ public <R extends DsfRole> RoleConfig<R> read(InputStream config, DsfRoleFactory`
`50`	`52`
`51`	`53`	`protected Yaml yaml()`
`52`	`54`	`{`
`53`		`- return new Yaml();`
	`55`	`+ return new Yaml(new SafeConstructor(new LoaderOptions()));`
`54`	`56`	`}`
`55`	`57`	`}`