Skip to content

fix: Event frontmatter YAML injection — use yaml.safe_dump for construction #23

Description

@branben

What to build

EventEmitter._persist_event manually constructs YAML frontmatter with f'{key}: "{val}"'. If val contains colons, quotes, or backslashes, the output is invalid YAML.

Use yaml.safe_dump for the entire frontmatter dict instead of manual line construction.

Acceptance criteria

  • Frontmatter is valid YAML for all input values
  • Tests verify special characters in event fields produce valid YAML

Blocked by

None - can start immediately

Parent

Tracks the campus framework v1 code review: #27

Activity

  1. branben commented on Oct 6, 2026

    @branben
    OwnerAuthor

    Closing: code referenced in this issue no longer exists (campus framework removed) or fix already applied.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions