@joern for your entertainment: at kubecon there was a presentation that told that $big tech company used erb templates in their ci/cd pipeline and later they figured out that people started to download random artifacts at deployment. What could possibly go wrong with erb in a language that supports open classes and all kinds of eval?
![$ python -c 'import yaml;y = yaml.safe_load(open("lol.yaml"));print(y["A"])'
Aaaaah
$ ruby -ryaml -e 'x = YAML.safe_load(File.read("lol.yaml"));puts x["A"]'
LOL!
$](https://threatactor.club/fileserver/016C9XGNWH2G8F4WAXXE00JYE9/attachment/original/01F5PYQBM7RZ2B8KA51W9RHYHW.png)
