CPAN Release 0.68_001

- Security fix Add $LoadBlessed option to turn on/off loading objects PR#73 TINITA++
ingydotnet · Dec 20, 2017 · b9e6075 · b9e6075
1 parent b60a064
commit b9e6075
Show file tree

Hide file tree

Showing 5 changed files with 12 additions and 4 deletions.
diff --git a/Changes b/Changes
@@ -1,4 +1,10 @@
 ---
+version: 0.68_001
+date:    Wed Dec 20 19:37:38 CET 2017
+changes:
+- Security fix Add $LoadBlessed option to turn on/off loading objects
+  PR#73 TINITA++
+---
 version: 0.68
 date:    Mon Dec 18 20:01:05 CET 2017
 changes:

diff --git a/Meta b/Meta
@@ -1,7 +1,7 @@
 =meta: 0.0.2
 
 name: YAML-LibYAML
-version: 0.68
+version: 0.68_001
 abstract: Perl YAML Serialization using XS and libyaml
 homepage: http://yaml.org
 language: perl

diff --git a/ReadMe.pod b/ReadMe.pod
@@ -45,12 +45,14 @@ When set to false, it will not bless data into objects, which can be a
 security problem, when loading YAML from an untrusted source. It will silently
 ignore the tag and just load the data unblessed.
 
+In PyYAML, this is called SafeLoad.
+
 If set to true, it will load the following YAML as objects:
 
     ---
     local: !Foo::Bar [a]
     perl: !!perl/hash:Foo::Bar { a: 1 }
-    regex: !!perl/regexp:Foo::Bar OK
+    regex: !!perl/regexp:Foo::Bar pattern
 
 =item C<$YAML::XS::UseCode>
 

diff --git a/lib/YAML/LibYAML.pm b/lib/YAML/LibYAML.pm
@@ -1,6 +1,6 @@
 use strict; use warnings;
 package YAML::LibYAML;
-our $VERSION = '0.68';
+our $VERSION = '0.68_001';
 
 sub import {
     die "YAML::LibYAML has been renamed to YAML::XS. Please use YAML::XS instead.";

diff --git a/lib/YAML/XS.pm b/lib/YAML/XS.pm
@@ -1,7 +1,7 @@
 use strict; use warnings;
 
 package YAML::XS;
-our $VERSION = '0.68';
+our $VERSION = '0.68_001';
 
 use base 'Exporter';