search

rubymem / bundler-leak

Known-leaky gems verification for bundler: `bundle leak` to check your app and find leaky gems in your Gemfile :gem::droplet:
https://www.rubymem.com
GNU General Public License v3.0
289 stars 11 forks source link

When using Psych v4+ (with default safe loading), permit `Date` class #48

Closed entretechno-jeremiah closed 2 years ago

entretechno-jeremiah commented 2 years ago

Ruby v3.1+ uses Psych v4+, which uses safe-loading by default for parsing YAML. Because of this, it's necessary to explicitly permit Date as a class that it can load.

Fixes #44.

I will abide by the code of conduct.

etagwerker commented 2 years ago

@entretechno-jeremiah Thanks for submitting your change! This is already being addressed in #45, so I'm going to close your PR.