dblock / grape / 27289356105 / 9

97%

master: 97%

push

github

Use create_additions: false in Grape::Json.load

When MultiJson is not available, Grape::Json falls back to stdlib JSON.
JSON.load honours the json_class key by calling json_create on the named
class, allowing a remote caller to instantiate arbitrary Ruby objects
already loaded in the process. Pass create_additions: false to disable
this behaviour.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1088 of 1203 branches covered (90.44%)

Branch coverage included in aggregate %.

3508 of 3604 relevant lines covered (97.34%)

968.13 hits per line