[CAUSEWAY-3550] YamlUtils: Global tag expression is discouraged

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Resolved
• Fix Version/s: 2.0.0-RC3
• Assignee: Andi Huber
• Reporter: Andi Huber
• Created: 02/Aug/23 06:07
• Updated: 02/Aug/23 06:21
• Resolved: 02/Aug/23 06:21

Description

YAML file first line historically was starting with a global tag pointing to the dto class. Yet this should no longer be used since SnakeYaml 2.0.

https://medium.com/@snyksec/snakeyaml-2-0-solving-the-unsafe-deserialization-vulnerability-c29a0f08f152