Class UnTrustedTagInspector

java.lang.Object
org.yaml.snakeyaml.inspector.UnTrustedTagInspector
All Implemented Interfaces:
TagInspector

public final class UnTrustedTagInspector extends Object implements TagInspector
TagInspector which does not allow to create any custom instance. It should not be used when the data comes from untrusted source to prevent possible remote code invocation.
  • Constructor Details

    • UnTrustedTagInspector

      public UnTrustedTagInspector()
  • Method Details

    • isGlobalTagAllowed

      public boolean isGlobalTagAllowed(Tag tag)
      Allow none
      Specified by:
      isGlobalTagAllowed in interface TagInspector
      Parameters:
      tag - - the global tag to reject
      Returns:
      always return false