Class FaradayMiddleware::ParseYaml
In: lib/faraday_middleware/response/parse_yaml.rb
Parent: ResponseMiddleware

Public: Parse response bodies as YAML.

Warning: This is not backwards compatible with versions of this middleware prior to faraday_middleware v0.12 - prior to this version, we used YAML.load rather than YAMl.safe_load, which exposes serious remote code execution risks - see github.com/ruby/psych/issues/119 for details. If you‘re sure you can trust YAML you‘re passing, you can set up an unsafe version of this middleware as follows:

    class UnsafelyParseYaml < FaradayMiddleware::ResponseMiddleware
      dependency do
        require 'yaml'
      end

      define_parser do |body|
        YAML.load body
      end
    end

    Faraday.new(..) do |config|
      config.use UnsafelyParseYaml
      ...
    end

[Validate]