Unverified50% confidenceFactExact time
`hermes config set agent.disabled_toolsets '["browser","tts"]'` writes the value as a quoted string rather than a true YAML sequence; the filter expects a list and will silently ignore a string.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/15/2026
First Seen
Valid until: 1/13/2027
Sources
Related Entities
Related Claims
UnverifiedPython 的 safe_load 只能解析单文档 YAML，而 js-yaml 库的 YAML.parse 支持多文档解析及 YAML 锚点、别名和 CloudFormation 的 !Sub 等自定义标签72% similarUnverifiedThe YAML specification requires keys in a mapping to be unique, but does not mandate that parsers raise an error on duplicate keys; mainstream implementations such as PyYAML default to a 'last one wins' strategy, keeping the final value without producing a warning.68% similarUnverifiedas<T>() 在类型不匹配时会抛出 YAML::TypedBadConversion 异常，LoadFile 在文件不存在时会抛出 YAML::BadFile 异常67% similarUnverified在Ruby中应避免对不可信YAML使用YAML.load，而应使用YAML.safe_load66% similarUnverifiedSnakeYAML's default load() or new Yaml() supports !! type tags, which can trigger instantiation of arbitrary Java classes, corresponding to the CWE-502 untrusted data deserialization vulnerability; the defense is to use SafeConstructor, a Constructor whitelist, or LoaderOptions to restrict the types that can be parsed.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1034698API
curl https://kongchang.com/api/v1/knowledge/claims/1034698MCP
get_claim(id=1034698)