lib/paper_trail/serializers/yaml.rb in paper_trail-12.1.0 vs lib/paper_trail/serializers/yaml.rb in paper_trail-12.2.0

@@ -7,10 +7,10 @@
     # The default serializer for, e.g. `versions.object`.
     module YAML
       extend self # makes all instance methods become module methods as well
 
       def load(string)
-        ::YAML.load string
+        ::YAML.respond_to?(:unsafe_load) ? ::YAML.unsafe_load(string) : ::YAML.load(string)
       end
 
       # @param object (Hash | HashWithIndifferentAccess) - Coming from
       # `recordable_object` `object` will be a plain `Hash`. However, due to
       # recent [memory optimizations](https://git.io/fjeYv), when coming from