dblock / grape / 27289099050

97%

master: 97%

push

github

Use create_additions: false in Grape::Json.load

When MultiJson is not available, Grape::Json falls back to stdlib JSON.
JSON.load honours the json_class key by calling json_create on the named
class, allowing a remote caller to instantiate arbitrary Ruby objects
already loaded in the process. Pass create_additions: false to disable
this behaviour.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1114 of 1205 branches covered (92.45%)

Branch coverage included in aggregate %.

6 of 6 new or added lines in 1 file covered. (100.0%)

3547 of 3608 relevant lines covered (98.31%)

23205.14 hits per line