Use unsafe_load for admin dashboard when showing papertrail version h…

…istory (#4418)
brave-intl · Apr 18, 2024 · aa216f3 · aa216f3
1 parent 0fe238d
commit aa216f3
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/app/views/admin/publishers/_case.html.slim b/app/views/admin/publishers/_case.html.slim
@@ -1,5 +1,4 @@
-
-- if history.object_changes.present? && (changes = YAML.load(history.object_changes)) && changes.keys.any? { |k| ["assignee_id", "status"].include? k }
+- if history.object_changes.present? && (changes = YAML.unsafe_load(history.object_changes)) && changes.keys.any? { |k| ["assignee_id", "status"].include? k }
   .note-header
     span.mr-2= link_to("Case ##{history.number}", admin_case_path(history.item_id), class:'font-weight-bold text-dark')
     small.text-muted.mx-2 &#149;