Skip to content

0.53.0
Compare
Choose a tag to compare
@charleskorn charleskorn released this 18 Mar 01:33
· 306 commits to main since this release
0.53.0
5f82a2d
This commit was signed with the committer’s verified signature.
charleskorn Charles Korn
GPG key ID: 2D7F931385A7A869
Learn about vigilant mode.

  • Changed (⚠️ potentially breaking change): default to not parsing anchors and aliases to prevent billion laughs attacks (GHSA-c24f-2j3g-rg48 - thanks to @gdude2002 for reporting this offline)

    If your application needs to support anchors and aliases, enable them by setting YamlConfiguration.allowAnchorsAndAliases to true.

Contributors

gdude2002
Assets 12
Loading