Bug#862373: Unconditionally instantiates objects from yaml data

2017-11-11 Thread Dominique Dumont
On Saturday, 11 November 2017 17:17:28 CET Dominique Dumont wrote: > This is not an ideal solution, but is better than nothing... Got good reasons [1], upstream is not thrilled about the idea of adding SafeLoad to YAML::XS API. So I've disabled the patch. TINITA suggests [2] to use unbless from D

Bug#862373: Unconditionally instantiates objects from yaml data

2017-11-11 Thread Dominique Dumont
On Fri, 12 May 2017 08:03:12 +0200 Dominique Dumont wrote: > > As previously mentioned in debian-perl@, there is no easy solution, I've prepared a patch to provide a SafeLoad method. This avoids breaking application that need to create Perl class from YAML. On the downside: - application using

Bug#862373: Unconditionally instantiates objects from yaml data

2017-05-11 Thread Dominique Dumont
> As previously mentioned in debian-perl@, there is no easy solution, A possibility to limit the impact is to deny object creation if the class has a DESTROY method. Knowing that UNIVERSAL has no DESTROY method, It's fairly easy to test: $ perl -MFile::Temp -E 'say File::Temp->can("DESTROY") ?