Your scanner says 3 issues on my domain, but rails_xml_yaml_scanner instantly says none. Is your scanner scanning for more than the yaml thing? I don't really have access to just modify a production system on the fly to go through your verification process, and I don't want to go through all the trouble if it's just some nessus nag. It's confusing because it says three issues, but low impact. I thought I was only scanning for a yaml flaw, and yaml flaws typically lead to remote code exec.
edit : I somehow stumbled into the full scanner on the main site rather than using the yaml scanner, my bad.
edit : I somehow stumbled into the full scanner on the main site rather than using the yaml scanner, my bad.