I have a Rails application and I\'m using jQuery to query my search view in the background. There are fields q (search term), start_date, end
Note that this answer in its bare form is only appropriate for the other use case listed below rather than the one in the question. While mostly fixed, there have been numerous YAML related security vulnerabilities which were caused by loading user input as YAML.
A trick I use for converting strings to bools is YAML.load, e.g.:
YAML.load(var) # -> true/false if it's one of the below
YAML bool accepts quite a lot of truthy/falsy strings:
y|Y|yes|Yes|YES|n|N|no|No|NO
|true|True|TRUE|false|False|FALSE
|on|On|ON|off|Off|OFF
Assume that you have a piece of config code like this:
config.etc.something = ENV['ETC_SOMETHING']
And in command line:
$ export ETC_SOMETHING=false
Now since ENV vars are strings once inside code, config.etc.something's value would be the string "false" and it would incorrectly evaluate to true. But if you do like this:
config.etc.something = YAML.load(ENV['ETC_SOMETHING'])
it would be all okay. This is compatible with loading configs from .yml files as well.