# Is YAML.load secure within a controller?

**URL:** <https://www.ruby-forum.com/t/is-yaml-load-secure-within-a-controller/90256>\
**Category:** Rails\
**Created:** [March 27, 2007, 2:20am UTC](https://www.ruby-forum.com/t/is-yaml-load-secure-within-a-controller/90256 "2007-03-27T02:20:26Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![yottameter](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/y/df705f/32.png) [@yottameter](https://www.ruby-forum.com/u/yottameter)\
**Post date:** [March 27, 2007, 2:20am UTC](https://www.ruby-forum.com/t/is-yaml-load-secure-within-a-controller/90256/1 "2007-03-27T02:20:26Z")

</div>

I’m using a YAML load in the following manner inside of a controller:

```
      myObject=YAML.load(request.raw_post)

```

Are there any security concerns with this method?

Thanks in advance!