From c2812fb616a9a0f31bbc3906a8ec9bad9faec498 Mon Sep 17 00:00:00 2001 From: Samuel Giddins Date: Wed, 7 Feb 2024 12:26:31 -0800 Subject: [PATCH] [rubygems/rubygems] Control whether YAML aliases are enabled in Gem::SafeYAML.safe_load via a constant https://github.com/rubygems/rubygems/commit/6bedb1cb79 Reference:https://github.com/ruby/ruby/commit/c2812fb616a9a0f31bbc3906a8ec9bad9faec498 Conflict:Slightly different context --- lib/rubygems/safe_yaml.rb | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/lib/rubygems/safe_yaml.rb b/lib/rubygems/safe_yaml.rb index 789bb5e..5ad256e 100644 --- a/lib/rubygems/safe_yaml.rb +++ b/lib/rubygems/safe_yaml.rb @@ -26,9 +26,12 @@ module Gem runtime ) + ALIASES = true # :nodoc: + private_constant :ALIASES + if ::YAML.respond_to? :safe_load def self.safe_load input - ::YAML.safe_load(input, WHITELISTED_CLASSES, WHITELISTED_SYMBOLS, true) + ::YAML.safe_load(input, WHITELISTED_CLASSES, WHITELISTED_SYMBOLS, ALIASES) end def self.load input -- 2.33.0