Skip to content

Commit

Permalink
Merge pull request #21 from Gastron/patch-1
Browse files Browse the repository at this point in the history
Add a security note in the README
  • Loading branch information
pplantinga authored Dec 13, 2023
2 parents 124bf74 + c71c144 commit a230105
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,12 @@ up python files for data analysis to just the bare algorithm.
* [How to use HyperPyYAML](#how-to-use-hyperpyyaml)
* [Conclusion](#conclusion)

### Security note
Loading HyperPyYAML allows arbitrary code execution.
This is a feature: HyperPyYAML allows you to construct *anything* and *everything*
you need in your experiment.
However, take care to verify any untrusted recipes' YAML files just as you would verify the Python code.

YAML basics
-----------

Expand Down

0 comments on commit a230105

Please sign in to comment.