From e59a5b889dffdfa81c3aa154225127ce8f1334c2 Mon Sep 17 00:00:00 2001 From: Jochen Topf Date: Sat, 23 Feb 2013 08:42:44 +0100 Subject: Set :create_additions => false for JSON parse, because we don't need it and it might lead to security problems --- web/lib/config.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'web/lib') diff --git a/web/lib/config.rb b/web/lib/config.rb index c901921..6195c28 100644 --- a/web/lib/config.rb +++ b/web/lib/config.rb @@ -6,7 +6,7 @@ class TaginfoConfig def self.read open(File.expand_path(File.dirname(__FILE__)) + '/../../../taginfo-config.json') do |file| - @@config = JSON.parse(file.gets(nil)) + @@config = JSON.parse(file.gets(nil), { :create_additions => false }) end end -- cgit v1.2.3