{"action":"created","issue":{"url":"https://api.github.com/repos/CloudSlang/cloud-slang/issues/442","labels_url":"https://api.github.com/repos/CloudSlang/cloud-slang/issues/442/labels{/name}","comments_url":"https://api.github.com/repos/CloudSlang/cloud-slang/issues/442/comments","events_url":"https://api.github.com/repos/CloudSlang/cloud-slang/issues/442/events","html_url":"https://github.com/CloudSlang/cloud-slang/issues/442","id":104287918,"number":442,"title":"Loading custom classes from yaml (.sl) files","user":{"login":"Bonczidai","id":8058961,"avatar_url":"https://avatars.githubusercontent.com/u/8058961?v=3","gravatar_id":"","url":"https://api.github.com/users/Bonczidai","html_url":"https://github.com/Bonczidai","followers_url":"https://api.github.com/users/Bonczidai/followers","following_url":"https://api.github.com/users/Bonczidai/following{/other_user}","gists_url":"https://api.github.com/users/Bonczidai/gists{/gist_id}","starred_url":"https://api.github.com/users/Bonczidai/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Bonczidai/subscriptions","organizations_url":"https://api.github.com/users/Bonczidai/orgs","repos_url":"https://api.github.com/users/Bonczidai/repos","events_url":"https://api.github.com/users/Bonczidai/events{/privacy}","received_events_url":"https://api.github.com/users/Bonczidai/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-09-01T15:08:23Z","updated_at":"2015-09-09T05:45:59Z","closed_at":null,"body":"In CloudSlang we use an `org.yaml.snakeyaml.Yaml` bean to load Yaml files. Now it constructed in the default way:\r\n\r\n```Java\r\nYaml yaml = new Yaml();\r\n```\r\naccording to https://code.google.com/p/snakeyaml/wiki/Documentation, in this form it allows to load custom objects from Yaml file - e.g. `\"--- !org.yaml.snakeyaml.constructor.Person\\nfirstName: Andrey\\nage: 99\"` this will be interpreted as a Person object\r\n\r\nnot now, but in the future this may cause security issues -- if we want to limit objects to standard Java objects like List or Long we need to use:\r\n\r\n```Java\r\nYaml yaml = new Yaml(new SafeConstructor());\r\n```\r\n\r\nQ is whether we want to allow the loading of custom objects in our .sl files?"},"comment":{"url":"https://api.github.com/repos/CloudSlang/cloud-slang/issues/comments/138791268","html_url":"https://github.com/CloudSlang/cloud-slang/issues/442#issuecomment-138791268","issue_url":"https://api.github.com/repos/CloudSlang/cloud-slang/issues/442","id":138791268,"user":{"login":"oritstone","id":7547370,"avatar_url":"https://avatars.githubusercontent.com/u/7547370?v=3","gravatar_id":"","url":"https://api.github.com/users/oritstone","html_url":"https://github.com/oritstone","followers_url":"https://api.github.com/users/oritstone/followers","following_url":"https://api.github.com/users/oritstone/following{/other_user}","gists_url":"https://api.github.com/users/oritstone/gists{/gist_id}","starred_url":"https://api.github.com/users/oritstone/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/oritstone/subscriptions","organizations_url":"https://api.github.com/users/oritstone/orgs","repos_url":"https://api.github.com/users/oritstone/repos","events_url":"https://api.github.com/users/oritstone/events{/privacy}","received_events_url":"https://api.github.com/users/oritstone/received_events","type":"User","site_admin":false},"created_at":"2015-09-09T05:45:59Z","updated_at":"2015-09-09T05:45:59Z","body":"@meirwah do you think it is an issue we want to address?"}}