HN user

endycm

3 karma
Posts0
Comments2
View on HN
No posts found.

Author has no clue, but I don't blame him.

There are - similar to the JSON insanity - multiple YAML standards.

YAML 1.1 and 1.2+ are the important ones, as the "superset" argument is only valid since 1.2.

HOWEVER PyYAML is a YAML 1.1 parser: https://pypi.org/project/PyYAML/#description

This also can be responsible for many security problems, as ppl will assume things about JSON and YAML, but don't worry about which of the 8 different JSON standards / YAML implementations they use.