Module: Gem::SafeYAML

Relationships & Source Files
Defined in:	lib/rubygems/safe_yaml.rb

Overview

This module is used for safely loading YAML specs from a gem. The .safe_load method defined on this module is specifically designed for loading ::Gem specifications. For loading other YAML safely, please see Psych.safe_load

Constant Summary

PERMITTED_CLASSES =
# File 'lib/rubygems/safe_yaml.rb', line 10

%w[
  Symbol
  Time
  Date
  Gem::Dependency
  Gem::Platform
  Gem::Requirement
  Gem::Specification
  Gem::Version
  Gem::Version::Requirement
].freeze

PERMITTED_SYMBOLS =
# File 'lib/rubygems/safe_yaml.rb', line 22
```
%w[
  development
  runtime
].freeze
```

Class Method Summary

.load(input)

See additional method definition at line 36.
.safe_load(input, *args)

See additional method definition at line 28.

Class Method Details

.load(input)

See additional method definition at line 36.

[ GitHub ]

# File 'lib/rubygems/safe_yaml.rb', line 52


def self.load(input)
  if Gem::Version.new(Psych::VERSION) >= Gem::Version.new('3.1.0.pre1')
    ::YAML.safe_load(input, permitted_classes: [::Symbol])
  else
    ::YAML.safe_load(input, [::Symbol])
  end
end

.safe_load(input, *args)

See additional method definition at line 28.

[ GitHub ]

# File 'lib/rubygems/safe_yaml.rb', line 48


def self.safe_load(input)
  if Gem::Version.new(Psych::VERSION) >= Gem::Version.new('3.1.0.pre1')
    ::YAML.safe_load(input, permitted_classes: PERMITTED_CLASSES, permitted_symbols: PERMITTED_SYMBOLS, aliases: true)
  else
    ::YAML.safe_load(input, PERMITTED_CLASSES, PERMITTED_SYMBOLS, true)
  end
end