From d45fb19ee579eb8b28e4dd565bf21c0044ceb326 Mon Sep 17 00:00:00 2001
From: Hiroshi SHIBATA <hsbt@ruby-lang.org>
Date: Wed, 16 Oct 2024 16:36:34 +0900
Subject: [PATCH] [ruby/yaml] Prefer to use YAML.safe_load

https://github.com/ruby/yaml/commit/c3d0f64224
---
 lib/yaml/dbm.rb | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/lib/yaml/dbm.rb b/lib/yaml/dbm.rb
index 1a9590e099..167799bcd4 100644
--- a/lib/yaml/dbm.rb
+++ b/lib/yaml/dbm.rb
@@ -55,7 +55,13 @@ class DBM < ::DBM
     def fetch( keystr, ifnone = nil )
         begin
             val = super( keystr )
-            return YAML.load( val ) if String === val
+            if String === val
+                if YAML.respond_to?(:safe_load)
+                    return YAML.safe_load( val )
+                else
+                    return YAML.load( val )
+                end
+            end
         rescue IndexError
         end
         if block_given?
@@ -101,7 +107,11 @@ class DBM < ::DBM
     def delete( key )
         v = super( key )
         if String === v
-            v = YAML.load( v )
+            if YAML.respond_to?(:safe_load)
+                v = YAML.safe_load( v )
+            else
+                v = YAML.load( v )
+            end
         end
         v
     end