Hi, Jozef Kutej <[email protected]> writes:
> Damyan Ivanov wrote: >> Shouldn't this be loaded by the module which parses META.yml? In >> dh-make-perl's case this is the YAML module (I also tried with >> YAML::Syck and YAML::XS). > > hmm that could be a security risk, if by loading yaml file some other > module would be automatically loaded, or? A YAML file can call constructors for all loaded modules? That would seem rather strange to me and might open lots of security holes when loading an untrusted YAML file (you cannot assume that all modules have safe constructors). Or did I understand something wrong? Regards, Ansgar -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
