Hacker News new | past | comments | ask | show | jobs | submit login

> The only way this bug could have happened is if doing manual string templating.

I agree you should not do that, but it is common in the YAML world - if you're using YAML you've already decided you don't care if things are reliable.

Given that they were using string templating, this would have been caught earlier using a different format.

Of course there are other string templating mistakes that other formats would not catch (e.g. forgetting to escape strings), but they are still better than YAML.




The problem obviously is using string templating without proper escaping

Any format would fail if used like that, be it YAML, JSON, XML...


This problem is specific to YAML because it doesn't require quoting.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: