Bypass of GitLab CI runner slash fix in YAML validation

I notice the bug #301432 that Jobert reported earlier is could be bypassed by setting variable in environment.

a:
  script:
  - echo "script"
  - echo "a"
  cache:
    key: "$ONE"
    policy: pull #or push if you like to poison
    paths:
      - .