Quoting the ruby documentation: > Marshal.load is not suitable as a general purpose serialization format and you should never unmarshal user supplied input or

Quoting the ruby documentation: > Marshal.load is not suitable as a general purpose serialization format and you should never unmarshal user supplied input or other untrusted data.