config-security

YAML Code Security: Deserialization, Injection, and Safe Parsing

YAML code powers config files across the ecosystem, but unsafe parsing can turn a data file into remote code execution. Here is how to write and load it safely.