fix: SnakeYAML uses only standard Java types

Signed-off-by: Marc Nuri <marc@marcnuri.com>
fabric8io · Jan 5, 2022 · 4451030 · 4451030
1 parent 1d1b3d4
commit 4451030
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/kubernetes-client/src/main/java/io/fabric8/kubernetes/client/utils/Serialization.java b/kubernetes-client/src/main/java/io/fabric8/kubernetes/client/utils/Serialization.java
@@ -23,6 +23,7 @@
 import io.fabric8.kubernetes.api.model.KubernetesResource;
 import io.fabric8.kubernetes.client.KubernetesClientException;
 import org.yaml.snakeyaml.Yaml;
+import org.yaml.snakeyaml.constructor.SafeConstructor;
 
 import java.io.BufferedInputStream;
 import java.io.ByteArrayInputStream;
@@ -296,7 +297,7 @@ private static String readSpecFileFromInputStream(InputStream inputStream) {
   }
 
   private static <T> T unmarshalYaml(InputStream is, TypeReference<T> type) throws JsonProcessingException {
-    final Yaml yaml = new Yaml();
+    final Yaml yaml = new Yaml(new SafeConstructor());
     Map<String, Object> obj = yaml.load(is);
     String objAsJsonStr = JSON_MAPPER.writeValueAsString(obj);
     return unmarshalJsonStr(objAsJsonStr, type);