codeql
codeql copied to clipboard
Ruby: treat `Psych` and `YAML` as aliases for rb/unsafe-deserialization
trafficstars
In semi-recent versions of ruby the YAML module is an alias of Psych.
https://ruby-doc.com/stdlib-3.0.1/libdoc/yaml/rdoc/YAML.html