https://bugs.ruby-lang.org/https://bugs.ruby-lang.org/favicon.ico?17113305112017-11-29T01:52:13ZRuby Issue Tracking SystemRuby master - Bug #14096: Psych allows invalid single quote escape characterhttps://bugs.ruby-lang.org/issues/14096?journal_id=679902017-11-29T01:52:13Zheadius (Charles Nutter)headius@headius.com
<ul></ul><p>Link to <a href="https://github.com/yaml/libyaml/issues/68" class="external">https://github.com/yaml/libyaml/issues/68</a></p> Ruby master - Bug #14096: Psych allows invalid single quote escape characterhttps://bugs.ruby-lang.org/issues/14096?journal_id=681992017-12-05T16:52:35Zheadius (Charles Nutter)headius@headius.com
<ul></ul><p>Pull request <a href="https://github.com/yaml/libyaml/pull/74" class="external">https://github.com/yaml/libyaml/pull/74</a> has been created for libyaml, which means this is likely to percolate up to MRI over the coming years.</p>
<p>It might be good to get ahead of it and patch Psych to forbid the single quote escape, but I'm not sure how easy that would be to do.</p>
<p>We are closing related bugs in JRuby as "Won't Fix" given that this character is not spec and will soon be forbidden by libyaml.</p> Ruby master - Bug #14096: Psych allows invalid single quote escape characterhttps://bugs.ruby-lang.org/issues/14096?journal_id=731472018-07-26T11:07:21Zhsbt (Hiroshi SHIBATA)hsbt@ruby-lang.org
<ul><li><strong>Status</strong> changed from <i>Open</i> to <i>Assigned</i></li><li><strong>Assignee</strong> set to <i>hsbt (Hiroshi SHIBATA)</i></li></ul> Ruby master - Bug #14096: Psych allows invalid single quote escape characterhttps://bugs.ruby-lang.org/issues/14096?journal_id=908642021-03-10T19:25:34Zjeremyevans0 (Jeremy Evans)merch-redmine@jeremyevans.net
<ul><li><strong>Status</strong> changed from <i>Assigned</i> to <i>Closed</i></li></ul><p>This has been fixed in libyaml 0.2.1 (released June 2018), and the YAML given by <a class="user active user-mention" href="https://bugs.ruby-lang.org/users/286">@headius (Charles Nutter)</a> will raise <code>Psych::SyntaxError</code> on Ruby versions 1.9-3.0 when used with libyaml 0.2.1+.</p>