Skip to content

Instantly share code, notes, and snippets.

@JacobNinja

JacobNinja/brakeman.clj

Created March 13, 2014 19:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save JacobNinja/9534692 to your computer and use it in GitHub Desktop.
Save JacobNinja/9534692 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
brakeman.clj
(defn unsafe-deserialization? [node]
(and (call-with-receiver-node? node)
(eq-receiver? node "YAML")
(some #(eq-method-name? node %)
["load" "load_documents" "load_stream" "parse_documents" "parse_stream"])))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment