Users of a YAMLScript binding module should be able to specify the powers that the runtime is allowed to use at code evaluation time.
Currently a yamlscript().load(...) operation allows full powers.
The default should be bare mode only (only YAML data, no code evaluation).
After all, YAMLScript is intended to be a replacement for current language YAML loaders.
Users of a YAMLScript binding module should be able to specify the powers that the runtime is allowed to use at code evaluation time.
Currently a
yamlscript().load(...)operation allows full powers. The default should be bare mode only (only YAML data, no code evaluation). After all, YAMLScript is intended to be a replacement for current language YAML loaders.