Error when generating static files with Hexo 5.4.0 about hexo-theme-minos

[wenheqi]

I just checked the homepage of js-yaml. Here is what I got:

js-yaml 3.x.x

Both safeLoad and load will parse string as single YAML document. Under the load function, the author of js-yaml says

Use with care with untrusted sources. The same as safeLoad() but uses DEFAULT_FULL_SCHEMA by default - adds some JavaScript-specific types: !!js/function, !!js/regexp and !!js/undefined. For untrusted sources, you must additionally validate object structure to avoid injections

js-yaml 4.x.x

safeLoad is removeda as load is safe by default.

Speaking of trusted sources, if my understanding is correct, minos uses yaml.safeLoad only to parse the _config.lang.yml under minos folder and those .yml files are supplied by the blog developer (minos provided an example _config.yml file to make it easier to start).

I can also help to test some basics like generating static files and serve the files on a server on Hexo 5.3.x and some early versions like 3.6.0 to see if it works with yaml.load and let you know the results on my side. Btw, do we currently have any automated test scripts available? I checked the package.json file in minos root folder but no luck.

[ppoffice]

Sounds good to me. Look forward to your PR.

[wenheqi]

#124

[ppoffice]

by the way, does this change have any impact on hexo 5.3.x and before?