  def file_list io # :nodoc:
    header = String.new

    read_until_dashes io do |line|
      header << line
    end

    Gem::SafeYAML.safe_load header
  end
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.