dblock / grape / 27289356105 / 29

97%

master: 97%

push

github

Use create_additions: false in Grape::Json.load

When MultiJson is not available, Grape::Json falls back to stdlib JSON.
JSON.load honours the json_class key by calling json_create on the named
class, allowing a remote caller to instantiate arbitrary Ruby objects
already loaded in the process. Pass create_additions: false to disable
this behaviour.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

40 of 1203 branches covered (3.33%)

Branch coverage included in aggregate %.

1746 of 3604 relevant lines covered (48.45%)

0.68 hits per line