-
Notifications
You must be signed in to change notification settings - Fork 518
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ValueError on "._" input #168
Comments
It seems the regular expression for floats used by pyyaml is not correct. Then again, the regex from the spec seems to be broken because it allows multiple dots. Some tests are failing if I take out the Not sure what would be the best to do here. |
Fixes CVE-2017-18342 referenced in yaml/pyyaml#168
Fixes CVE in yaml/pyyaml#168.
I created #497 |
PyYAML 6.0 was released where this is fixed via #497, so I think this can be closed? |
@The-Compiler thanks. Closing. |
Following piece of code results in ValueError when given "._" input for PyYAML 3.12 to parse:
And is then run:
I would expect PyYAML only to return errors of type yaml.YAMLError, as documented, so that I can avoid catching arbitrary errors from that function, as that's generally considered bad style.
The text was updated successfully, but these errors were encountered: