Sign upLogin

kigster/dupervisor

View on GitHub
Star
lib/dupervisor/formats/yaml.rb

Summary

Maintainability
A
0 mins
Test Coverage

Prefer using YAML.safe_load over YAML.load.
Open

      from    ->(string)  { ::YAML.load(string) }
Severity: Minor
Found in lib/dupervisor/formats/yaml.rb by rubocop

This cop checks for the use of YAML class methods which have potential security issues leading to remote code execution when loading from an untrusted source.

Example:

# bad
YAML.load("--- foo")

# good
YAML.safe_load("--- foo")
YAML.dump("foo")

There are no issues that match your filters.

Category
Status