class RuboCop::Cop::Security::JSONLoad
JSON.parse(“{}”)
# good
JSON.restore(“{}”)
JSON.load(“{}”)
# bad
@example
Other similar issues may apply.
option, like ‘JSON.parse(’false’, quirks_mode: true)‘.
`JSON.load(’false’)‘, it will need to pass the `quirks_mode: true`
If reading single values (rather than proper JSON objects), like
`#read` manually, like `JSON.parse(open(’file’).read)‘.
If using a stream, like `JSON.load(open(’file’))‘, it will need to call
This cop’s autocorrection is unsafe because it’s potentially dangerous.
@safety
security issues.
Checks for the use of JSON class methods which have potential
def on_send(node)
def on_send(node) json_load(node) do |method| add_offense(node.loc.selector, message: format(MSG, method: method)) do |corrector| corrector.replace(node.loc.selector, 'parse') end end end