Add type checking for the SnakeYAML constructor.

Author: brendandburns

util/src/main/java/io/kubernetes/client/util/Yaml.java

@@ -34,6 +34,7 @@
 import org.slf4j.LoggerFactory;
 import org.yaml.snakeyaml.DumperOptions;
 import org.yaml.snakeyaml.constructor.Constructor;
+import org.yaml.snakeyaml.constructor.SafeConstructor;
 import org.yaml.snakeyaml.introspector.Property;
 import org.yaml.snakeyaml.nodes.MappingNode;
 import org.yaml.snakeyaml.nodes.Node;
@@ -78,7 +79,7 @@ public static Object load(File f) throws IOException {
    * @throws IOException If an error occurs while reading the YAML.
    */
   public static Object load(Reader reader) throws IOException {
-    Map<String, Object> data = getSnakeYaml().load(reader);
+    Map<String, Object> data = getSnakeYaml(null).load(reader);
     return modelMapper(data);
   }
 
@@ -92,7 +93,7 @@ public static Object load(Reader reader) throws IOException {
    * @throws IOException If an error occurs while reading the YAML.
    */
   public static <T> T loadAs(String content, Class<T> clazz) {
-    return getSnakeYaml().loadAs(new StringReader(content), clazz);
+    return getSnakeYaml(clazz).loadAs(new StringReader(content), clazz);
   }
 
   /**
@@ -104,7 +105,7 @@ public static <T> T loadAs(String content, Class<T> clazz) {
    * @throws IOException If an error occurs while reading the YAML.
    */
   public static <T> T loadAs(File f, Class<T> clazz) throws IOException {
-    return getSnakeYaml().loadAs(new FileReader(f), clazz);
+    return getSnakeYaml(clazz).loadAs(new FileReader(f), clazz);
   }
 
   /**
@@ -117,7 +118,7 @@ public static <T> T loadAs(File f, Class<T> clazz) throws IOException {
    * @throws IOException If an error occurs while reading the YAML.
    */
   public static <T> T loadAs(Reader reader, Class<T> clazz) {
-    return getSnakeYaml().loadAs(reader, clazz);
+    return getSnakeYaml(clazz).loadAs(reader, clazz);
   }
 
   /**
@@ -160,7 +161,7 @@ public static List<Object> loadAll(File f) throws IOException {
    * @throws IOException If an error occurs while reading the YAML.
    */
   public static List<Object> loadAll(Reader reader) throws IOException {
-    Iterable<Object> iterable = getSnakeYaml().loadAll(reader);
+    Iterable<Object> iterable = getSnakeYaml(null).loadAll(reader);
     List<Object> list = new ArrayList<Object>();
     for (Object object : iterable) {
       if (object != null) {
@@ -182,7 +183,7 @@ public static List<Object> loadAll(Reader reader) throws IOException {
    * @return A YAML String representing the API object.
    */
   public static String dump(Object object) {
-    return getSnakeYaml().dump(object);
+    return getSnakeYaml(object.getClass()).dump(object);
   }
 
   /**
@@ -192,7 +193,7 @@ public static String dump(Object object) {
    * @param writer The writer to write the YAML to.
    */
   public static void dump(Object object, Writer writer) {
-    getSnakeYaml().dump(object, writer);
+    getSnakeYaml(object.getClass()).dump(object, writer);
   }
 
   /**
@@ -202,7 +203,7 @@ public static void dump(Object object, Writer writer) {
    * @return A String representing the list of YAML API objects.
    */
   public static String dumpAll(Iterator<? extends KubernetesType> data) {
-    return getSnakeYaml().dumpAll(data);
+    return getSnakeYaml(null).dumpAll(data);
   }
 
   /**
@@ -212,11 +213,15 @@ public static String dumpAll(Iterator<? extends KubernetesType> data) {
    * @param output The writer to output the YAML String to.
    */
   public static void dumpAll(Iterator<? extends KubernetesType> data, Writer output) {
-    getSnakeYaml().dumpAll(data, output);
+    getSnakeYaml(null).dumpAll(data, output);
   }
 
   /** Defines constructor logic for custom types in this library. */
   public static class CustomConstructor extends Constructor {
+    public CustomConstructor(Class<?> type) {
+      super(type);
+    }
+
     @Override
     protected Object constructObject(Node node) {
       if (node.getType() == IntOrString.class) {
@@ -225,11 +230,9 @@ protected Object constructObject(Node node) {
       if (node.getType() == byte[].class) {
         return constructByteArray((ScalarNode) node);
       }
-
       if (node.getType() == OffsetDateTime.class) {
         return constructDateTime((ScalarNode) node);
       }
-
       return super.constructObject(node);
     }
 
@@ -357,8 +360,11 @@ protected NodeTuple representJavaBeanProperty(
   }
 
   /** @return An instantiated SnakeYaml Object. */
-  public static org.yaml.snakeyaml.Yaml getSnakeYaml() {
-    return new org.yaml.snakeyaml.Yaml(new CustomConstructor(), new CustomRepresenter());
+  public static org.yaml.snakeyaml.Yaml getSnakeYaml(Class<?> type) {
+    if (type != null) {
+      return new org.yaml.snakeyaml.Yaml(new CustomConstructor(type), new CustomRepresenter());
+    }
+    return new org.yaml.snakeyaml.Yaml(new SafeConstructor(), new CustomRepresenter());
   }
 
   /**
@@ -381,7 +387,7 @@ private static Object modelMapper(Map<String, Object> data) throws IOException {
       throw new IOException(
           "Unknown apiVersionKind " + apiVersion + "/" + kind + " is it registered?");
     }
-    return loadAs(new StringReader(getSnakeYaml().dump(data)), clazz);
+    return loadAs(new StringReader(getSnakeYaml(clazz).dump(data)), clazz);
   }
 
   @Deprecated