Lizzie Dixon
Lizzie Dixon
`snakeyaml` allows the creation of arbitrary Java objects. This is usually a Bad Thing. These commits add an option key to `make-yaml`, `:unsafe`, and uses `SafeConstructor` by default. (See also...
Previously `*keywordize*` was a dynamic variable, and so e.g. `(map decode ...)` would use the default `*keywordize*` (i.e. `true`) rather than the locally bound one, since `map` is the calling...
Maybe something like our `Marked`?
There's a lot of duplicated logic here, + a second unnecessary tree traversal.