As you might remember YAML formatted parameters are not enabled by default in Rails due to YAML (or more specifically the YAML parsers used by most scripting languages like e.g. Python or Ruby) not being designed to handle malicious user input. The YAML parser used by Ruby supports th...
