diff options
| author | Jochen Topf <jochen@topf.org> | 2013-02-23 08:42:44 +0100 |
|---|---|---|
| committer | Jochen Topf <jochen@topf.org> | 2013-02-23 08:42:44 +0100 |
| commit | e59a5b889dffdfa81c3aa154225127ce8f1334c2 (patch) | |
| tree | 55836d4d254b10227e41d6f36d02a9ea9a5b670a /web | |
| parent | f70e889fdb7afadd09af545df233c17ad151acee (diff) | |
| download | taginfo-e59a5b889dffdfa81c3aa154225127ce8f1334c2.tar taginfo-e59a5b889dffdfa81c3aa154225127ce8f1334c2.tar.gz | |
Set :create_additions => false for JSON parse, because we don't need it and it might lead to security problems
Diffstat (limited to 'web')
| -rw-r--r-- | web/lib/config.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/web/lib/config.rb b/web/lib/config.rb index c901921..6195c28 100644 --- a/web/lib/config.rb +++ b/web/lib/config.rb @@ -6,7 +6,7 @@ class TaginfoConfig def self.read open(File.expand_path(File.dirname(__FILE__)) + '/../../../taginfo-config.json') do |file| - @@config = JSON.parse(file.gets(nil)) + @@config = JSON.parse(file.gets(nil), { :create_additions => false }) end end |