Issue #21427 has been updated by Andrew Parker.
Instead of using YAML for network communication, PSON or JSON should be used. This can be done by setting an HTTP header of "Accept: pson" to get responses in PSON format. When sending requests that have a serialized body send a "Content-Type: pson" header and serialize in PSON format. If you are using puppet as a library, then this should be done already. ---------------------------------------- Feature #21427: Deprecate YAML for network data transmission https://projects.puppetlabs.com/issues/21427#change-93628 * Author: Andrew Parker * Status: Accepted * Priority: Normal * Assignee: Patrick Carlisle * Category: * Target version: 3.3.0 * Affected Puppet version: * Keywords: * Branch: ---------------------------------------- YAML serialization has ended up being slower than P/JSON and opens the system up to a number of security flaws. It is time to leave YAML behind on the network layer. We'll continue to keep it for storing some information on disk. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/groups/opt_out.
