://bugzilla.redhat.com/show_bug.cgi?id=1807367
Thanks to Riccardo Schirone (https://github.com/ret2libc) for both reporting
this and providing the fixes to resolve it.
Changes
===
* https://github.com/yaml/pyyaml/pull/386 -- Prevents arbitrary code execution
during python/object/new constructor
Resources
one
aware datetimes) and some other small enhancements.
Changes
===
* https://github.com/yaml/pyyaml/pull/290 -- Use `is` instead of equality for
comparing with `None`
* https://github.com/yaml/pyyaml/pull/270 -- fix typos and stylistic nit
* https://github.com/yaml/pyyaml/pull/309 -- Fix up sm
incompatibilities introduced with 5.1. The default Loader was changed,
but several methods like add_constructor still used the old default
https://github.com/yaml/pyyaml/pull/279 -- A more flexible fix for custom tag
constructors
https://github.com/yaml/pyyaml/pull/287 -- Change default
Assuming you are asking about the logic at the uber level.
You can try handling yaml file with pyyaml. It is a 3rd party package which
has a good support for I/O related to yaml files.
After you are able to read the data from the file, you need to apply your
business logic to it. And log all the
Hi all,
I have several yaml files in a directory around 100s. I have some values
and my script should search a string(reading from the JSON file) from the
series of yaml files and run some validation like the key of the file that
is updated in the yaml file and run some basic validation tests
addresses the
arbitrary code execution issue raised by:
https://nvd.nist.gov/vuln/detail/CVE-2017-18342
<https://nvd.nist.gov/vuln/detail/CVE-2017-18342>
(See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
for complete details).
The PyYAML project is now maintained
On Tue, Feb 26, 2019 at 2:11 PM Ravindranath Barathy
wrote:
>
> Im trying to create a flask app that can take in a yaml file with the
> following values,
>
> info:
> url: http://something.com/api
> username: user1
> password: secret
>
>
> This yaml file
Im trying to create a flask app that can take in a yaml file with the following
values,
info:
url: http://something.com/api
username: user1
password: secret
This yaml file is then read by the flask app and uses the info to interact with
the api. Everything works file in dev but, when I
, this release specifically addresses the
arbitrary code execution issue raised by:
https://nvd.nist.gov/vuln/detail/CVE-2017-18342
(See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
for complete details).
The PyYAML project is now maintained by the YAML and Python
latest Cython to support the new Python 3.7 release.
* No functionality is different from PyYAML 3.12 in this release.
Resources
=
PyYAML IRC Channel: #pyyaml on irc.freenode.net
YAML IRC Channel: #yaml-dev on irc.freenode.net
LibYAML IRC Channel: #libyaml on irc.freenode.net
PyYAML
original
author, Kirill Simonov, to Ian Cordasco and Ingy döt Net.
The canonical source repo moved:
from: https://bitbucket.org/xi/pyyaml/
to: https://github.com/yaml/pyyaml
The PyYAML project is now maintained by the YAML and Python communities.
Planning happens on the #yaml-dev, #pyyaml
Lele Gaifax :
> leam hall writes:
>
>> Tracked down the GitHub repo (https://github.com/yaml/pyyaml) and it seems
>> to be gearing back up. I'll see what I can do to help.
>
> See also https://bitbucket.org/ruamel/yaml, a fork of PyYAML, it seems more
> actively
leam hall writes:
> Tracked down the GitHub repo (https://github.com/yaml/pyyaml) and it seems
> to be gearing back up. I'll see what I can do to help.
See also https://bitbucket.org/ruamel/yaml, a fork of PyYAML, it seems more
actively maintained and already supports format 1.2.
On Fri, Aug 4, 2017 at 11:52 AM, Skip Montanaro
wrote:
> > Getting in to Ansible and back into Python. Ansible uses pyyaml which
> says
> > it parses yaml version 1.1. Is there a reason it doesn't do yaml version
> > 1.2?
>
> Nobody's done the work?
> Getting in to Ansible and back into Python. Ansible uses pyyaml which says
> it parses yaml version 1.1. Is there a reason it doesn't do yaml version
> 1.2?
Nobody's done the work? Note that on the PyPI page:
https://pypi.python.org/pypi/PyYAML
the last release was almo
Getting in to Ansible and back into Python. Ansible uses pyyaml which says
it parses yaml version 1.1. Is there a reason it doesn't do yaml version
1.2?
Thanks!
Leam
--
https://mail.python.org/mailman/listinfo/python-list
Ben Finney writes:
> I don't know of any PEP yet which specifies exactly what to add to the
> standard library for YAML
YAML is more of a Ruby thing, so there might not be much constituency
for putting it in Python.
--
https://mail.python.org/mailman/listinfo/python-list
to be as broadly useful as possible. Is
YAML widely enough used in domains as varied as web application
development, bioinformatics, and machine learning to justify its
inclusion in the standard library? Maybe not. In addition, I suspect
more and more people are using virtual environments of one sort
Paul Moore writes:
> As I understand it, YAML as a markup language is not as popular as it once
> was.
Given all the hype around Docker these days, I'm not convinced that's true :)
> In addition, the main YAML library on PyPI is PyYAML
There is fork, https://pypi.python.o
including legality of the software, copyright, patents, etc.
>
> 9. Or it may be only available under a proprietary, closed-source
> licence that is incompatible with Python's open source licence.
>
> 10. There may be nobody willing to maintain the library once it
&g
Steve D'Aprano writes:
> On Sun, 30 Jul 2017 01:27 am, Goldstein wrote:
>
> > I'm new in this mailing list and, in fact, I've registered for one
> > simple question. Why YAML is not yet included in the standard Python
> > library? It's the most
On Sun, 30 Jul 2017 01:27 am, Goldstein wrote:
> Hello.
> I'm new in this mailing list and, in fact, I've registered for one simple
> question. Why YAML is not yet included in the standard Python library?
> It's the most pythonic markup language, I think, and it's
On 7/29/2017 11:27 AM, Goldstein wrote:
Hello.
I'm new in this mailing list and, in fact, I've registered for one simple
question.
Why YAML is not yet included in the standard Python library?
It's the most pythonic markup language, I think, and it's pretty popular.
You ca
Hello.
I'm new in this mailing list and, in fact, I've registered for one simple
question.
Why YAML is not yet included in the standard Python library?
It's the most pythonic markup language, I think, and it's pretty popular.
--
https://mail.python.org/mailman/listinfo/python-list
raphi...@gmail.com wrote:
> Note that in my example the content to be inserted is not the result
of a
> variable substitution, but the result of a call to a function. format
> doesn't seem to work in this case. And jinja2 doesn't seem to provide
a
> straight forward solution either
>
> Thx
Yoy
On 20/08/2014 07:50, raphi...@gmail.com wrote:
Would you please access this list via
https://mail.python.org/mailman/listinfo/python-list or read and action
this https://wiki.python.org/moin/GoogleGroupsPython to prevent us
seeing double line spacing and single line paragraphs, thanks.
--
My
> > I'm using pyyaml, and need some values in a yaml files to be dynamic,
> > > for
> > > > example somethin like:
> > > > filename: /tmp/backup_{% time.strftime('%Y-%m-%d') }.tgz
> > > > Is there a simple way to achieve this? (Eg
On Tuesday, August 19, 2014 7:15:54 PM UTC+2, Rustom Mody wrote:
> On Tuesday, August 19, 2014 10:31:03 PM UTC+5:30, Laurent Pointal wrote:
>
> > raphinou wrote:
>
>
>
> > > Hi,
>
> > > I'm using pyyaml, and need some values in a yaml fi
On Tuesday, August 19, 2014 10:31:03 PM UTC+5:30, Laurent Pointal wrote:
> raphinou wrote:
> > Hi,
> > I'm using pyyaml, and need some values in a yaml files to be dynamic,
> for
> > example somethin like:
> > filename: /tmp/backup_{% time.strftime('%Y
raphi...@gmail.com wrote:
> Hi,
>
> I'm using pyyaml, and need some values in a yaml files to be dynamic,
for
> example somethin like:
>
> filename: /tmp/backup_{% time.strftime('%Y-%m-%d') }.tgz
>
> Is there a simple way to achieve this? (Eg with
Hi,
I'm using pyyaml, and need some values in a yaml files to be dynamic, for
example somethin like:
filename: /tmp/backup_{% time.strftime('%Y-%m-%d') }.tgz
Is there a simple way to achieve this? (Eg with a templating system that would
first handle the template parts fro
/PyYAML-3.10.win32-py3.2.exe
PyYAML SVN repository: http://svn.pyyaml.org/pyyaml
Submit a bug report: http://pyyaml.org/newticket?component=pyyaml
YAML homepage: http://yaml.org/
YAML-core mailing list:
http://lists.sourceforge.net/lists/listinfo/yaml-core
About PyYAML
YAML is a
I'm sponsoring the development of cross-platform (C/C++) utilities for
extracting a variety of media meta-data as JSON, including stream
checksums and stream meta-data.
git://github.com/coolaj86/mtags.git
I'd like to get support for developing this, and I'm interested in the
opinions
of others w
On Fri, 05 Feb 2010 09:22:03 -0500, Lou Pecora wrote:
[...]
>> > That's what I needed. 3 lines to write or read a inhomogeneous
>> > collection of variables.
>>
>> Easy, but also quick and dirty -- good enough for small scripts, but
>> not really good enough for production applications.
[...]
>
Python 2.6)
>
> * you're using eval, which is a security risk if you can't trust the
> source of the data file.
>
> However, be aware that neither marshal nor pickle guarantees to be safe
> against malicious data either. The docs for both warn against using them
> on
Steven D'Aprano writes:
> However, be aware that neither marshal nor pickle guarantees to be safe
> against malicious data either. The docs for both warn against using them
> on untrusted data. YAML or JSON *might* be safer, I haven't looked.
Regarding malicious data, fr
nf or nan (at least prior to
Python 2.6)
* you're using eval, which is a security risk if you can't trust the
source of the data file.
However, be aware that neither marshal nor pickle guarantees to be safe
against malicious data either. The docs for both warn against using them
on untr
Lou Pecora writes:
> In article <87eil1ddjp.fsf...@castleamber.com>,
> John Bokma wrote:
>
>> Lou Pecora writes:
>>
>> > That's a pretty accurate description of how I transitioned to Python
>> > from C and Fortran.
>>
>> No
In article <87eil1ddjp.fsf...@castleamber.com>,
John Bokma wrote:
> Lou Pecora writes:
>
> > That's a pretty accurate description of how I transitioned to Python
> > from C and Fortran.
>
> Not C, but C++ (but there are also C implementations): YAML, see:
Lou Pecora writes:
> That's a pretty accurate description of how I transitioned to Python
> from C and Fortran.
Not C, but C++ (but there are also C implementations): YAML, see:
http://code.google.com/p/yaml-cpp/wiki/HowToParseADocument
I use YAML now and then with Perl for b
yYAML-3.09.win32-py3.1.exe
PyYAML SVN repository: http://svn.pyyaml.org/pyyaml
Submit a bug report: http://pyyaml.org/newticket?component=pyyaml
YAML homepage: http://yaml.org/
YAML-core mailing list:
http://lists.sourceforge.net/lists/listinfo/yaml-core
About PyYAML
YAML
class User(object):
def __init__(self, uid):
self.uid = uid
self.__dict__.update(yaml.load(str('uid')+'.yaml'))
def save(self):
f=open(str(self.uid)+'.yaml')
yaml.dump(self.__dict__, f)
is there a better way to persist usin
Paul schrieb:
class User(object):
def __init__(self, uid):
self.uid = uid
self.__dict__.update(yaml.load(str('uid')+'.yaml'))
def save(self):
f=open(str(self.uid)+'.yaml')
yaml.dump(self.__dict__, f)
is there a better way to
On Mar 2, 8:19 pm, Paul wrote:
> class User(object):
> def __init__(self, uid):
> self.uid = uid
> self.__dict__.update(yaml.load(str('uid')+'.yaml'))
>
> def save(self):
> f=open(str(self.uid)+'.yaml')
>
On Sun, Feb 1, 2009 at 11:41 PM, wrote:
> hi
>I have to create a yaml file using my list of objects.shall i need to
> create a string using my objects and then load and dump that string or
> is there any other way to create the yaml file.
>
> i want a yaml file to be
hi
I have to create a yaml file using my list of objects.shall i need to
create a string using my objects and then load and dump that string or
is there any other way to create the yaml file.
i want a yaml file to be created from [Text, Author,..]in this format
Text:
- value1
g/download/pyyaml/PyYAML-3.07.win32-py2.6.exe
PyYAML SVN repository: http://svn.pyyaml.org/pyyaml
Submit a bug report: http://pyyaml.org/newticket?component=pyyaml
YAML homepage: http://yaml.org/
YAML-core mailing list:
http://lists.sourceforge.net/lists/listinfo/yaml-core
About PyYAML
installation
of LibYAML bindings, use '--with-libyaml' or '--without-libyaml'
options respectively.
* Building LibYAML bindings no longer requires Pyrex installed.
* 'yaml.load()' raises an exception if the input stream contains
more than one YAML document.
gt; So I'm wondering if there is an option to YAML.decode that will create
>> a yaml document without the tags?
>
> Try yaml.safe_dump().
>
>>>> import yaml
>
>>>> print yaml.dump(())
> !!python/tuple []
>
>>>> print yaml.safe_dump(())
Stephen Moore wrote:
I have come to the conclusion that this is the fault of the tags (for
example, !!python/tuple) as getting rid of them gets rid of the
errors.
So I'm wondering if there is an option to YAML.decode that will create
a yaml document without the tags?
Try yaml.safe
hello
I have a situation where I have quite a large python object which I
want to convert to yaml so I can then send it to a flex application
using pyamf.
I've managed to create a yaml document using the python object
(http://flashbsm.googlecode.com/svn/testing/yamlTest/tester.yaml)
(
Hello Everyone,
This is a very fast announcement to say that I've managed to remove
YAML from Vellum, but also to remove Python while still giving you
Python. :-)
Check out the latest Vellum:
http://www.zedshaw.com/projects/vellum/
https://launchpad.net/vellum
And you'll notice that
Announcing PyYAML-3.05
A new bug fix release of PyYAML is now available:
http://pyyaml.org/wiki/PyYAML
Changes
===
* Windows binary packages were built with LibYAML trunk.
* Fixed a bug that prevent processing a live stream of YAML
I'll be out of the office until approximately August 20th. If you have any
questions, please email [EMAIL PROTECTED]
-- David Wahler
--
http://mail.python.org/mailman/listinfo/python-list
bug report: http://pyyaml.org/newticket?component=pyyaml
YAML homepage: http://yaml.org/
YAML-core mailing list: http://lists.sourceforge.net/lists/listinfo/yaml-core
About PyYAML
YAML is a data serialization format designed for human readability and
interaction with scripting
Windows installer: http://pyyaml.org/download/pyyaml/PyYAML-3.03.win32.exe
PyYAML SVN repository: http://svn.pyyaml.org/pyyaml
Submit a bug report: http://pyyaml.org/newticket?component=pyyaml
YAML homepage: http://yaml.org/
YAML-core mailing list: http://lists.sourceforge.net/lists/listinfo/yaml-core
Kirill Simonov wrote:
>
> Announcing PyYAML-3.02
>
>
> A new bug-fix release of PyYAML is now available:
>
> http://pyyaml.org/wiki/PyYAML
Another fix provided for Python 2.5 and friends.
--
-Scott David Daniels
[EMAIL PROTECTED]
--
http:
.
* Add the yaml-highlight example. Try to run on a color terminal:
`python yaml_hl.py http://pyyaml.org/wiki/PyYAML
PyYAML documentation: http://pyyaml.org/wiki/PyYAMLDocumentation
TAR.GZ package: http://pyyaml.org/download/pyyaml/PyYAML-3.02.tar.gz
ZIP package: http://pyyaml.org/download/pyyaml
PyYAML: YAML parser and emitter for Python
==
I am pleased to announce the initial release of PyYAML.
YAML is a data serialization format designed for human readability and
interaction with scripting languages. PyYAML is a YAML parser and
emitter for
Aahz writes -
>While I can see how you'd get that impression of reST, it's not true:
>like Python, reST is intended to be simpl*er* and readable, but not
>simple.
Really?
;)
Thanks for taking this one on. I was tempted. But scared ;)
I find reST quite useful.
Not a very sophisticated way
Aahz wrote:
> While I can see how you'd get that impression of reST, it's not true:
> like Python, reST is intended to be simpl*er* and readable, but not
> simple. The joy of reST is that I can concentrate on writing instead of
> formatting, just as I do when writing Usenet posts. ;-) Even after
On Sun, 2005-01-23 at 13:41 +0100, Fredrik Lundh wrote:
> Alan Kennedy wrote:
> > If I can't find such a markup language, then I might instead end up using a
> > WYSIWYG editing
> > component that gives the user a GUI and generates (x)html.
> >
> > htmlArea: http://www.htmlarea.com/
> > Editlet:
In article <[EMAIL PROTECTED]>,
Fredrik Lundh <[EMAIL PROTECTED]> wrote:
>
>I've read many specs; YAML (both the spec and the format) is easily
>among the worst ten-or-so specs I've ever seen.
>
>ReST and YAML share the same deep flaw: both formats are marketed
In article <[EMAIL PROTECTED]>,
Alan Kennedy <[EMAIL PROTECTED]> wrote:
>
>I think that is where a lot of markup languages fall down, in that they
>end trying to develop a sophisticated metadata model that can capture
>that kind of information, and re-engineering the markup to support it.
>This
[Alan Kennedy]
>>However, I'm torn on whether to use ReST for textual content. On the one
>>hand, it's looks pretty comprehensive and solidly implemented. But OTOH,
>>I'm concerned about complexity: I don't want to commit to ReST if it's
>>going to become a lot of hard work or highly-inefficient wh
In article <[EMAIL PROTECTED]>,
Alan Kennedy <[EMAIL PROTECTED]> wrote:
>
>However, I'm torn on whether to use ReST for textual content. On the one
>hand, it's looks pretty comprehensive and solidly implemented. But OTOH,
>I'm concerned about complexity: I don't want to commit to ReST if it's
>
Fredrik Lundh <[EMAIL PROTECTED]> wrote:
>Sion Arrowsmith wrote:
>> I'm probably not thinking deviously enough here, but how are you
>> going to exploit an eval() which has very tightly controlled
>> globals and locals (eg. eval(x, {"__builtins__": None}, {}) ?
>try this:
>
>eval("'*'*100*2
Fredrik Lundh wrote:
Sion Arrowsmith wrote:
I'm probably not thinking deviously enough here, but how are you
going to exploit an eval() which has very tightly controlled
globals and locals (eg. eval(x, {"__builtins__": None}, {}) ?
try this:
eval("'*'*100*2*2*2*2*2*2*2*2*2")
I updated the s
Sion Arrowsmith wrote:
Paul Rubin <http://[EMAIL PROTECTED]> wrote:
YAML looks to me to be completely insane, even compared to Python
lists. I think it would be great if the Python library exposed an
interface for parsing constant list and dict expressions, e.g.:
[1, 2,
Sion Arrowsmith wrote:
> I'm probably not thinking deviously enough here, but how are you
> going to exploit an eval() which has very tightly controlled
> globals and locals (eg. eval(x, {"__builtins__": None}, {}) ?
try this:
eval("'*'*100*2*2*2*2*2*2*2*2*2")
(for more on eval and buil
r whatever. Python is already close to YAML in
some ways.
true, it's easy enough to separate the data from the functionality in
python by putting the data in a dictionary/list/tuple, but it stays
source code.
Check out JSON, an alternative to XML for data interchange. It is
basica
Paul Rubin <http://[EMAIL PROTECTED]> wrote:
>YAML looks to me to be completely insane, even compared to Python
>lists. I think it would be great if the Python library exposed an
>interface for parsing constant list and dict expressions, e.g.:
> [1, 2, 'Joe Smith',
into other
formats with a few lines of code. Most importantly these
are much safer to run than a program.
I think of an XML document as a "mini-database" where one
can easily and efficiently access content via XPath. So there
is a lot more to XML than just markup and that's
why YAML vs
[Alan Kennedy]
>>So, I'm hoping that the learned folks here might be able to give me
>>some pointers to a markup language that has the following
>>characteristics
[Paul Rubin]
> I'm a bit biased but I've been using Texinfo for a long time and have
> been happy with it. It's reasonably lightweight
[Alan Kennedy]
>> From what I've seen, pretty much every textual markup targetted
>> for web content, e.g. wiki markup, seems to have grown/evolved
>> organically, meaning that it is either underpowered or overpowered,
>> full of special cases, doesn't have a meaningful object model, etc.
[Fredrik
rm wrote:
Paul Rubin wrote:
Reinhold Birkenfeld <[EMAIL PROTECTED]> writes:
For those of you who don't know what YAML is: visit http://yaml.org/!
You will be amazed, and never think of XML again. Well, almost.
Oh please no, not another one of these. We really really don't need
Doug Holton wrote:
> You might like programming in XML then: http://www.meta-language.net/
> :)
http://www.meta-language.net/sample.html#class-metal
I'm not so sure ;-)
Daniel Bickett
--
http://mail.python.org/mailman/listinfo/python-list
Alan Kennedy wrote:
> From what I've seen, pretty much every textual markup targetted for web
> content, e.g. wiki markup,
> seems to have grown/evolved organically, meaning that it is either
> underpowered or overpowered,
> full of special cases, doesn't have a meaningful object model, etc.
Alan Kennedy <[EMAIL PROTECTED]> writes:
> However, I'm torn on whether to use ReST for textual content. On the
> one hand, it's looks pretty comprehensive and solidly implemented.
It seemed both unnecessary and horrendously overcomplicated when I
looked at it. I'd stay away.
> So, I'm hoping th
[Effbot]
ReST and YAML share the same deep flaw: both formats are marketed
as simple, readable formats, and at a first glance, they look simple and read-
able -- but in reality, they're messy as hell, and chances are that the thing
you're looking at doesn't really mean what you
You might like programming in XML then: http://www.meta-language.net/
Actually, the samples are hard to find, they are here:
http://www.meta-language.net/sample.html
Programming in XML makes Perl and PHP look like the cleanest languages
ever invented.
--
http://mail.python.org/mailman/listinfo/pyt
Daniel Bickett wrote:
In my (brief) experience with YAML, it seemed like there were several
different ways of doing things, and I saw this as one of it's failures
(since we're all comparing it to XML). However I maintain, in spite of
all of that, that it can easily boil down to the fact
Steve Holden wrote:
Yet again I will interject that XML was only ever intended to be wriiten
by programs. Hence its moronic stupidity and excellent uniformity.
Neither was HTML, neither were URLs, neither were many things used the
way they were intended. YAML, however, is specifically designed
Peter Hansen wrote:
Good question. The point is that an XML document is sometimes
a file, sometimes a record in a relational database, sometimes an
object delivered by an Object Request Broker, and sometimes a
stream of bytes arriving at a network socket.
These can all be described a
Doug Holton wrote:
Fredrik Lundh wrote:
and trust me, when things are hard to get right for developers, users
will
suffer too.
That is exactly why YAML can be improved. But XML proves that getting
it "right" for developers has little to do with getting it right for
users (or
Bengt Richter wrote:
I thought XML was a good idea, but IMO requiring quotes around
even integer attribute values was an unfortunate decision.
I think it helps guard against incompetent authors who wouldn't
understand when they're required to use quotes and when they're not. I
see HTML pages all
Stephen Waterbury wrote:
it's interesting to note that the intent
Steve Holden imputed to it earlier is not explicitly among them:
Steve Holden wrote:
It seems to me the misunderstanding here is that XML was ever intended
to be generated directly by typing in a text editor. It was rather
intended
Fredrik Lundh wrote:
Stephen Waterbury wrote:
The premise that XML had a coherent design intent
stetches my credulity beyond its elastic limit.
the design goals are listed in section 1.1 of the specification.
see tim bray's annotated spec for additional comments by one
of the team members:
http
Doug Holton wrote:
> That is exactly why YAML can be improved. But XML proves that getting
> it "right" for developers has little to do with getting it right for
> users (or for saving bandwidth). What's right for developers is what
> requires the least amount of wo
[EMAIL PROTECTED] (Alex Martelli) writes:
> I wonder, however, if, as an even "toyer" exercise, one might not
> already do it easily -- by first checking each token (as generated by
> tokenize.generate_tokens) to ensure it's safe, and THEN eval _iff_ no
> unsafe tokens were found in the check.
I d
Alex Martelli wrote:
>>[1, 2, 'Joe Smith', 8237972883334L, # comment
>> {'Favorite fruits': ['apple', 'banana', 'pear']}, # another comment
>> 'xyzzy', [3, 5, [3.14159, 2.71828, [
>>
>
Paul Rubin wrote:
YAML looks to me to be completely insane, even compared to Python
lists. I think it would be great if the Python library exposed an
interface for parsing constant list and dict expressions, e.g.:
[1, 2, 'Joe Smith', 8237972883334L, # comment
{'
e fruits': ['apple', 'banana', 'pear']}, # another comment
> 'xyzzy', [3, 5, [3.14159, 2.71828, [
>
> I don't see what YAML accomplishes that something like the above wouldn't.
>
> Note that all the values in the above
Stephen Waterbury wrote:
> The premise that XML had a coherent design intent
> stetches my credulity beyond its elastic limit.
the design goals are listed in section 1.1 of the specification.
see tim bray's annotated spec for additional comments by one
of the team members:
http://www.xml.co
r. Python is already close to YAML in some ways.
Maybe even better than YAML, especially if Fredrik's claims of YAML's
inherent unreliability are to be believed. Of course he develops a
competing XML product, so who knows.
true, it's easy enough to separate the data from the fu
Steve Holden wrote:
It seems to me the misunderstanding here is that XML was ever intended
to be generated directly by typing in a text editor. It was rather
intended (unless I'm mistaken) as a process-to-process data interchange
metalanguage that would be *human_readable*.
The premise that XML
Daniel Bickett <[EMAIL PROTECTED]> writes:
> In my (brief) experience with YAML, it seemed like there were several
> different ways of doing things, and I saw this as one of it's failures
> (since we're all comparing it to XML).
YAML looks to me to be completely insane
Doug Holton wrote:
> What do you expect? YAML is designed for humans to use, XML is not.
> YAML also hasn't had the backing and huge community behind it like XML.
> XML sucks for people to have to write in, but is straightforward to
> parse. The consequence is hordes of
"rm" <[EMAIL PROTECTED]> wrote:
> furthermore, "users will suffer too", I'm suffering if I have to use C++,
> with all its exceptions
> and special cases.
and when you suffer, your users will suffer. in the C++ case, they're likely to
suffer from spurious program crashes, massively delayed dev
y close to YAML in some ways.
Maybe even better than YAML, especially if Fredrik's claims of YAML's
inherent unreliability are to be believed. Of course he develops a
competing XML product, so who knows.
--
http://mail.python.org/mailman/listinfo/python-list
1 - 100 of 123 matches
Mail list logo
