Skip to content

Commit a230105

Browse files
authored
Merge pull request #21 from Gastron/patch-1
Add a security note in the README
2 parents 124bf74 + c71c144 commit a230105

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

README.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,12 @@ up python files for data analysis to just the bare algorithm.
1717
* [How to use HyperPyYAML](#how-to-use-hyperpyyaml)
1818
* [Conclusion](#conclusion)
1919

20+
### Security note
21+
Loading HyperPyYAML allows arbitrary code execution.
22+
This is a feature: HyperPyYAML allows you to construct *anything* and *everything*
23+
you need in your experiment.
24+
However, take care to verify any untrusted recipes' YAML files just as you would verify the Python code.
25+
2026
YAML basics
2127
-----------
2228

0 commit comments

Comments
 (0)