Oh yeah, of course.
she/her
- 0 Posts
- 4 Comments
Joined 2 years ago
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
link Englishfedilink 5 months ago1·arrow-up
link Englishfedilink 6 months ago4·arrow-up Yeah I agree. Although recently I’ve become partial to toml… In the end I’ll use what’s common in the ecosystem I’m developing in
link Englishfedilink 6 months ago11·arrow-up Nothing too major about how it’s usually used, but the yaml spec does allow arbitrary code execution when parsing a file and relies on the parser to have that feature disabled: https://en.m.wikipedia.org/wiki/YAML#Security
That’s why for python,
yaml.save_load()is a thing. That’s fine for your local config files and may even be a feature for you, but it shouldn’t be used to exchange information between services.
What decade do you live in? It’s closer to 2-4x nowadays, and 2TB is nothing