| Class | FaradayMiddleware::ParseYaml |
| In: |
lib/faraday_middleware/response/parse_yaml.rb
|
| Parent: | ResponseMiddleware |
Public: Parse response bodies as YAML.
Warning: This is not backwards compatible with versions of this middleware prior to faraday_middleware v0.12 - prior to this version, we used YAML.load rather than YAMl.safe_load, which exposes serious remote code execution risks - see github.com/ruby/psych/issues/119 for details. If you‘re sure you can trust YAML you‘re passing, you can set up an unsafe version of this middleware as follows:
class UnsafelyParseYaml < FaradayMiddleware::ResponseMiddleware
dependency do
require 'yaml'
end
define_parser do |body|
YAML.load body
end
end
Faraday.new(..) do |config|
config.use UnsafelyParseYaml
...
end