1berry/ruby
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Use YAML.safe_load to use the permitted_classes option

Browse Source
This commit is contained in:
aycabta 2021-05-21 21:45:03 +09:00
parent fb4195b969
commit c264d30261
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/rdoc/rdoc.rb
View File

@ -162,7 +162,7 @@ class RDoc::RDoc
RDoc.load_yaml RDoc.load_yaml
begin begin
options = YAML.load_file '.rdoc_options', permitted_classes: [RDoc::Options, Symbol] options = YAML.safe_load File.read('.rdoc_options'), permitted_classes: [RDoc::Options, Symbol]
rescue Psych::SyntaxError rescue Psych::SyntaxError
raise RDoc::Error, "#{options_file} is not a valid rdoc options file" raise RDoc::Error, "#{options_file} is not a valid rdoc options file"
end end

6
test/rdoc/test_rdoc_options.rb
View File

@ -145,7 +145,7 @@ class TestRDocOptions < RDoc::TestCase
@options.encoding = Encoding::IBM437 @options.encoding = Encoding::IBM437
options = YAML.load(YAML.dump(@options), permitted_classes: [RDoc::Options, Symbol]) options = YAML.safe_load(YAML.dump(@options), permitted_classes: [RDoc::Options, Symbol])
assert_equal Encoding::IBM437, options.encoding assert_equal Encoding::IBM437, options.encoding
end end
@ -161,7 +161,7 @@ rdoc_include:
- /etc - /etc
YAML YAML
options = YAML.load(yaml, permitted_classes: [RDoc::Options, Symbol]) options = YAML.safe_load(yaml, permitted_classes: [RDoc::Options, Symbol])
assert_empty options.rdoc_include assert_empty options.rdoc_include
assert_empty options.static_path assert_empty options.static_path
@ -749,7 +749,7 @@ rdoc_include:
assert File.exist? '.rdoc_options' assert File.exist? '.rdoc_options'
assert_equal @options, YAML.load(File.read('.rdoc_options'), permitted_classes: [RDoc::Options, Symbol]) assert_equal @options, YAML.safe_load(File.read('.rdoc_options'), permitted_classes: [RDoc::Options, Symbol])
end end
end end