ruby-grape / grape / 27311187721

97%

master: 97%

Pull #2762

github

Parse request bodies with JSON.parse in the stdlib fallback

Restore the original `Grape::Json = ::JSON` stdlib fallback (the wrapper
module added in #2759 is no longer needed) and fix the json_class
deserialization vector at its source: parse incoming bodies with
JSON.parse instead of JSON.load.

JSON.parse never honours the json_class additions mechanism, so it keeps
json_class payloads inert without the create_additions: false wrapper,
without the per-call delegation, and without depending on JSON.load's
shifting defaults (deprecated since json 2.8.0, defaulting to false in 3.0).

Net change vs. master: lib/grape/json.rb returns to its pre-#2759 shape;
lib/grape/parser/json.rb switches .load to .parse.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

1114 of 1205 branches covered (92.45%)

Branch coverage included in aggregate %.

3 of 3 new or added lines in 2 files covered. (100.0%)

3543 of 3604 relevant lines covered (98.31%)

23227.54 hits per line