dblock / grape / 27289099050 / 8

97%

master: 97%

push

github

Use create_additions: false in Grape::Json.load

When MultiJson is not available, Grape::Json falls back to stdlib JSON.
JSON.load honours the json_class key by calling json_create on the named
class, allowing a remote caller to instantiate arbitrary Ruby objects
already loaded in the process. Pass create_additions: false to disable
this behaviour.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1091 of 1205 branches covered (90.54%)

Branch coverage included in aggregate %.

3510 of 3605 relevant lines covered (97.36%)

965.85 hits per line