Serializers aren't inherently unsafe. Look at Lisp's (read) method, for example,...

		gcr on Jan 10, 2013 \| parent \| context \| favorite \| on: Metasploit Rails 3 Remote Code Execution Hours Awa... Serializers aren't inherently unsafe. Look at Lisp's (read) method, for example, which does not evaluate anything.