Added $LoadBlessed
- Since YAML::XS v0.69 and YAML.pm v1.25 you can disable blessing objects
- This allows to safely load YAML from untrusted sources
- YAML::Syck has had this already for a while
- Default is 1
- We are discussing to change the default for all three modules to 0
- Until then, do this:
use YAML;
$YAML::LoadBlessed = 0;
use YAML::XS;
$YAML::XS::LoadBlessed = 0;
use YAML::Syck;
$YAML::Syck::LoadBlessed = 0;