What YAML engine do you use?

[Fredrik Lundh]

Sion Arrowsmith wrote:

> I'm probably not thinking deviously enough here, but how are you
> going to exploit an eval() which has very tightly controlled
> globals and locals (eg. eval(x, {"__builtins__": None}, {}) ?

try this:

    eval("'*'*1000000*2*2*2*2*2*2*2*2*2")

(for more on eval and builtins, see the "Evaluating Python expressions"
section here: http://effbot.org/librarybook/builtin.htm )

</F>