I guess any rails application could be such trap, my observation is nobody does code reviews before pulling code, maybe we could do something like:
```ruby
if YAML.respond_to?(:safe_load)
then YAML.safe_load(file)
else YAML.load_file(file)
end
```