ruby-grape / grape / 27306538704 / 4

97%

master: 97%

push

github

Use create_additions: false in Grape::Json.load (#2759)

When MultiJson is not available, Grape::Json falls back to stdlib JSON.
JSON.load honours the json_class key by calling json_create on the named
class, allowing a remote caller to instantiate arbitrary Ruby objects
already loaded in the process. Pass create_additions: false to disable
this behaviour.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1090 of 1203 branches covered (90.61%)

Branch coverage included in aggregate %.

3512 of 3608 relevant lines covered (97.34%)

965.2 hits per line