I never could get Nix working but maybe someone will

  • infeeeee@lemm.ee
    link
    fedilink
    English
    arrow-up
    19
    ·
    edit-2
    11 hours ago
    what:
      is:
      your:
        - problem
        - with:
          YAML
    # At least you can have comments unlike in json. Who need comments in a config file anyway.
    
    • itslilith@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      5
      ·
      9 hours ago

      Nothing too major about how it’s usually used, but the yaml spec does allow arbitrary code execution when parsing a file and relies on the parser to have that feature disabled: https://en.m.wikipedia.org/wiki/YAML#Security

      That’s why for python, yaml.save_load() is a thing. That’s fine for your local config files and may even be a feature for you, but it shouldn’t be used to exchange information between services.

      • infeeeee@lemm.ee
        link
        fedilink
        English
        arrow-up
        4
        ·
        8 hours ago

        My general view is similar, yaml is better if it should be written by humans, json is better if it should be written and read only by a machine. but hyprspace uses json for configuration, so I don’t really understand cellardoor’s comment

        • itslilith@lemmy.blahaj.zone
          link
          fedilink
          English
          arrow-up
          2
          ·
          8 hours ago

          Yeah I agree. Although recently I’ve become partial to toml… In the end I’ll use what’s common in the ecosystem I’m developing in