[STORM-223] Safe YAML Parsing

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.9.2-incubating
• Component/s: storm-core
• Assignee: Robert Joseph Evans
• Reporter: Robert Joseph Evans
• Created: 07/Feb/14 16:30
• Updated: 09/Oct/15 00:56
• Resolved: 25/Apr/14 21:19

Description

See http://stackoverflow.com/questions/18703632/what-can-happen-when-loading-a-yaml-file-from-an-untrusted-source-with-snakeyaml

We should use Yaml yaml = new Yaml(new SafeConstructor()); to be sure.