Skip to content

Commit

Permalink
Use YAML.unsafe_load instead of YAML.load.
Browse files Browse the repository at this point in the history
  This is a temporary workaround. We should rewrite the examples with
  permitted_classes.
  • Loading branch information
hsbt committed May 17, 2021
1 parent dfecc65 commit a0e97b0
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 8 deletions.
2 changes: 1 addition & 1 deletion spec/mspec/lib/mspec/matchers/match_yaml.rb
Expand Up @@ -30,7 +30,7 @@ def clean_yaml(yaml)
def valid_yaml?(obj)
require 'yaml'
begin
YAML.load(obj)
YAML.unsafe_load(obj)
rescue
false
else
Expand Down
14 changes: 7 additions & 7 deletions spec/ruby/library/yaml/load_spec.rb
Expand Up @@ -99,7 +99,7 @@
Date.new( 2001, 8, 12 ),
Date.new( 2001, 8, 14 ) ]
}
YAML.load($complex_key_1).should == expected
YAML.unsafe_load($complex_key_1).should == expected
end

it "loads a symbol key that contains spaces" do
Expand All @@ -110,26 +110,26 @@

describe "with iso8601 timestamp" do
it "computes the microseconds" do
[ [YAML.load("2011-03-22t23:32:11.2233+01:00"), 223300],
[YAML.load("2011-03-22t23:32:11.0099+01:00"), 9900],
[YAML.load("2011-03-22t23:32:11.000076+01:00"), 76]
[ [YAML.unsafe_load("2011-03-22t23:32:11.2233+01:00"), 223300],
[YAML.unsafe_load("2011-03-22t23:32:11.0099+01:00"), 9900],
[YAML.unsafe_load("2011-03-22t23:32:11.000076+01:00"), 76]
].should be_computed_by(:usec)
end

it "rounds values smaller than 1 usec to 0 " do
YAML.load("2011-03-22t23:32:11.000000342222+01:00").usec.should == 0
YAML.unsafe_load("2011-03-22t23:32:11.000000342222+01:00").usec.should == 0
end
end

it "loads an OpenStruct" do
require "ostruct"
os = OpenStruct.new("age" => 20, "name" => "John")
loaded = YAML.load("--- !ruby/object:OpenStruct\ntable:\n :age: 20\n :name: John\n")
loaded = YAML.unsafe_load("--- !ruby/object:OpenStruct\ntable:\n :age: 20\n :name: John\n")
loaded.should == os
end

it "loads a File but raise an error when used as it is uninitialized" do
loaded = YAML.load("--- !ruby/object:File {}\n")
loaded = YAML.unsafe_load("--- !ruby/object:File {}\n")
-> {
loaded.read(1)
}.should raise_error(IOError)
Expand Down

0 comments on commit a0e97b0

Please sign in to comment.