Merge pull request ManageIQ#21988 from agrare/use_yaml_unsafe_load

Use yaml_unsafe_load to handle symbols (cherry picked from commit a4f4636)
Fryguy · Jul 13, 2022 · 705cdb7 · 705cdb7
1 parent 22b917a
commit 705cdb7
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/Gemfile b/Gemfile
@@ -65,7 +65,7 @@ gem "pg-dsn_parser",                    "~>0.1.0",           :require => false
 gem "query_relation",                   "~>0.1.0",           :require => false
 gem "rack",                             ">=2.2.3.1",         :require => false
 gem "rack-attack",                      "~>6.5.0",           :require => false
-gem "rails",                            "~>6.0.4", ">=6.0.4.8"
+gem "rails",                            "~>6.0.4", ">=6.0.5.1"
 gem "rails-i18n",                       "~>6.x"
 gem "rake",                             ">=12.3.3",          :require => false
 gem "rest-client",                      "~>2.1.0",           :require => false

diff --git a/config/application.rb b/config/application.rb
@@ -89,6 +89,9 @@ class Application < Rails::Application
     config.action_cable.allow_same_origin_as_host = true
     config.action_cable.mount_path = '/ws/notifications'
 
+    # Use yaml_unsafe_load for column serialization to handle Symbols
+    config.active_record.use_yaml_unsafe_load = true
+
     # Customize any additional options below...
 
     config.autoload_paths += config.eager_load_paths