json_pure 2.7.6 → 2.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dc10fe68c32c66130244c95986e80f41d17b72ed2d8311fde09c1d82dd8fa154
-  data.tar.gz: 3a9cd865c6b542d9ae199bac464d96d4f0116aee65eb35f7b4acfa1ab97a4f83
+  metadata.gz: 4c79a21e52d8328f2d07a73c932b6680f2b6db7a3725ea5c84d5f73e43a90e37
+  data.tar.gz: b182b612e32fb6151c245999f985bbd5b3e1fb888a168ba2e5412604f3d88a9e
 SHA512:
-  metadata.gz: 87ba58d3641b73445fc3b07ba70197b05efd2e319410530c946c8b3733c7ff2b5b3c8db61e482d3c3c52930d544d7637ee442a53670796b7cb7b5dbb9ecea0c0
-  data.tar.gz: 2f35def657dcae3cbbe4593f25513c4340bfbbc1b2ec7b7accec7914007893abf333e2aed047a92cdd24f13d85d03622518f07bad8cbf61caef17c0211235239
+  metadata.gz: 40bdbd82974a44e90b5ac767fa2938241c18a4cd1c45b3544da9287de4326ac69d6a9affef5401bdbf856ebbff65f475ded1a10f980143b1a7d736acb446254b
+  data.tar.gz: 165032b45f38308eb32cf93ca6a73357e328dc789e7ed585701c95d2d0d0e52d0b9aaddd2a44fc62b1eaebaf804fe56d07a06aa6509eed4cb72872661668fd8f

data/CHANGES.md

@@ -1,8 +1,12 @@
 # Changes
 
-### 2024-11-04 (2.7.6)
+### UNRELEASED
 
-* Fix a regression in JSON.generate when dealing with Hash keys that are string subclasses, call `to_json` on them.
+* Emit a deprecation warning when `JSON.load` create custom types without the `create_additions` option being explictly enabled.
+  * Prefer to use `JSON.unsafe_load(string)` or `JSON.load(string, create_additions: true)`.
+* Emit a deprecation warning when serializing valid UTF-8 strings encoded in `ASCII_8BIT` aka `BINARY`.
+* Bump required_ruby_version to 2.7.
+* More performance improvments to `JSON.dump` and `JSON.generate`.
 
 ### 2024-10-25 (2.7.5)
 

data/README.md

@@ -5,16 +5,10 @@
 ## Description
 
 This is an implementation of the JSON specification according to RFC 7159
-http://www.ietf.org/rfc/rfc7159.txt . There is two variants available:
+http://www.ietf.org/rfc/rfc7159.txt .
 
-* A pure ruby variant, that relies on the `strscan` extensions, which is
-  part of the ruby standard library.
-* The quite a bit faster native extension variant, which is in parts
-  implemented in C or Java and comes with a parser generated by the [Ragel]
-  state machine compiler.
-
-Both variants of the JSON generator generate UTF-8 character sequences by
-default. If an :ascii\_only option with a true value is given, they escape all
+The JSON generator generate UTF-8 character sequences by default.
+If an :ascii\_only option with a true value is given, they escape all
 non-ASCII and control characters with \uXXXX escape sequences, and support
 UTF-16 surrogate pairs in order to be able to generate the whole range of
 unicode code points.
@@ -82,50 +76,11 @@ You can also use the `pretty_generate` method (which formats the output more
 verbosely and nicely) or `fast_generate` (which doesn't do any of the security
 checks generate performs, e. g. nesting deepness checks).
 
-There are also the JSON and JSON[] methods which use parse on a String or
-generate a JSON document from an array or hash:
-
-```ruby
-document = JSON 'test'  => 23 # => "{\"test\":23}"
-document = JSON['test' => 23] # => "{\"test\":23}"
-```
-
-and
-
-```ruby
-data = JSON '{"test":23}'  # => {"test"=>23}
-data = JSON['{"test":23}'] # => {"test"=>23}
-```
-
-You can choose to load a set of common additions to ruby core's objects if
-you
-
-```ruby
-require 'json/add/core'
-```
-
-After requiring this you can, e. g., serialise/deserialise Ruby ranges:
-
-```ruby
-JSON JSON(1..10) # => 1..10
-```
-
-To find out how to add JSON support to other or your own classes, read the
-section "More Examples" below.
-
-## Serializing exceptions
-
-The JSON module doesn't extend `Exception` by default. If you convert an `Exception`
-object to JSON, it will by default only include the exception message.
-
-To include the full details, you must either load the `json/add/core` mentioned
-above, or specifically load the exception addition:
-
-```ruby
-require 'json/add/exception'
-```
+## Handling arbitrary types
 
-## More Examples
+> [!CAUTION]
+> You should never use `JSON.unsafe_load` nor `JSON.parse(str, create_additions: true)` to parse untrusted user input,
+> as it can lead to remove code execution vulnerabilities.
 
 To create a JSON document from a ruby data structure, you can call
 `JSON.generate` like that:
@@ -191,7 +146,7 @@ JSON.parse json
 # => [1, 2, {"a"=>3.141}, false, true, nil, 4..10]
 json = JSON.generate [1, 2, {"a"=>3.141}, false, true, nil, 4..10]
 # => "[1,2,{\"a\":3.141},false,true,null,{\"json_class\":\"Range\",\"data\":[4,10,false]}]"
-JSON.parse json, :create_additions => true
+JSON.unsafe_load json
 # => [1, 2, {"a"=>3.141}, false, true, nil, 4..10]
 ```
 

data/json_pure.gemspec

@@ -1,50 +1,31 @@
+# frozen_string_literal: true
+
 version = File.foreach(File.join(__dir__, "lib/json/version.rb")) do |line|
   /^\s*VERSION\s*=\s*'(.*)'/ =~ line and break $1
 end rescue nil
 
 Gem::Specification.new do |s|
-  s.name = "json_pure".freeze
+  s.name = "json_pure"
   s.version = version
 
-  s.summary = "JSON Implementation for Ruby".freeze
-  s.description = "This is a JSON implementation in pure Ruby.".freeze
-  s.licenses = ["Ruby".freeze]
-  s.authors = ["Florian Frank".freeze]
-  s.email = "flori@ping.de".freeze
+  s.summary = "JSON Implementation for Ruby"
+  s.description = "This is a JSON implementation in pure Ruby."
+  s.licenses = ["Ruby"]
+  s.authors = ["Florian Frank"]
+  s.email = "flori@ping.de"
 
-  s.extra_rdoc_files = ["README.md".freeze]
-  s.rdoc_options = ["--title".freeze, "JSON implementation for ruby".freeze, "--main".freeze, "README.md".freeze]
+  s.extra_rdoc_files = ["README.md"]
+  s.rdoc_options = ["--title", "JSON implementation for ruby", "--main", "README.md"]
   s.files = [
-    "CHANGES.md".freeze,
-    "COPYING".freeze,
-    "BSDL".freeze,
-    "LEGAL".freeze,
-    "README.md".freeze,
-    "json_pure.gemspec".freeze,
-    "lib/json.rb".freeze,
-    "lib/json/add/bigdecimal.rb".freeze,
-    "lib/json/add/complex.rb".freeze,
-    "lib/json/add/core.rb".freeze,
-    "lib/json/add/date.rb".freeze,
-    "lib/json/add/date_time.rb".freeze,
-    "lib/json/add/exception.rb".freeze,
-    "lib/json/add/ostruct.rb".freeze,
-    "lib/json/add/range.rb".freeze,
-    "lib/json/add/rational.rb".freeze,
-    "lib/json/add/regexp.rb".freeze,
-    "lib/json/add/set.rb".freeze,
-    "lib/json/add/struct.rb".freeze,
-    "lib/json/add/symbol.rb".freeze,
-    "lib/json/add/time.rb".freeze,
-    "lib/json/common.rb".freeze,
-    "lib/json/ext.rb".freeze,
-    "lib/json/generic_object.rb".freeze,
-    "lib/json/pure.rb".freeze,
-    "lib/json/pure/generator.rb".freeze,
-    "lib/json/pure/parser.rb".freeze,
-    "lib/json/version.rb".freeze,
+    "CHANGES.md",
+    "COPYING",
+    "BSDL",
+    "LEGAL",
+    "README.md",
+    "json_pure.gemspec",
+    "lib/json/pure.rb",
   ]
-  s.homepage = "https://ruby.github.io/json".freeze
+  s.homepage = "https://ruby.github.io/json"
   s.metadata = {
     'bug_tracker_uri'   => 'https://github.com/ruby/json/issues',
     'changelog_uri'     => 'https://github.com/ruby/json/blob/master/CHANGES.md',
@@ -54,5 +35,7 @@ Gem::Specification.new do |s|
     'wiki_uri'          => 'https://github.com/ruby/json/wiki'
   }
 
-  s.required_ruby_version = Gem::Requirement.new(">= 2.3".freeze)
+  s.add_dependency "json"
+
+  s.required_ruby_version = Gem::Requirement.new(">= 2.7")
 end

data/lib/json/pure.rb

@@ -1,16 +1,4 @@
 # frozen_string_literal: true
-require 'json/common'
 
-module JSON
-  # This module holds all the modules/classes that implement JSON's
-  # functionality in pure ruby.
-  module Pure
-    require 'json/pure/parser'
-    require 'json/pure/generator'
-    $DEBUG and warn "Using Pure library for JSON."
-    JSON.parser = Parser
-    JSON.generator = Generator
-  end
-
-  JSON_LOADED = true unless defined?(::JSON::JSON_LOADED)
-end
+warn "`json_pure` is deprecated and has no effect, just use `json`"
+require "json"

metadata

@@ -1,15 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: json_pure
 version: !ruby/object:Gem::Version
-  version: 2.7.6
+  version: 2.8.0
 platform: ruby
 authors:
 - Florian Frank
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-11-04 00:00:00.000000000 Z
-dependencies: []
+date: 2024-11-05 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: This is a JSON implementation in pure Ruby.
 email: flori@ping.de
 executables: []
@@ -23,28 +37,7 @@ files:
 - LEGAL
 - README.md
 - json_pure.gemspec
-- lib/json.rb
-- lib/json/add/bigdecimal.rb
-- lib/json/add/complex.rb
-- lib/json/add/core.rb
-- lib/json/add/date.rb
-- lib/json/add/date_time.rb
-- lib/json/add/exception.rb
-- lib/json/add/ostruct.rb
-- lib/json/add/range.rb
-- lib/json/add/rational.rb
-- lib/json/add/regexp.rb
-- lib/json/add/set.rb
-- lib/json/add/struct.rb
-- lib/json/add/symbol.rb
-- lib/json/add/time.rb
-- lib/json/common.rb
-- lib/json/ext.rb
-- lib/json/generic_object.rb
 - lib/json/pure.rb
-- lib/json/pure/generator.rb
-- lib/json/pure/parser.rb
-- lib/json/version.rb
 homepage: https://ruby.github.io/json
 licenses:
 - Ruby
@@ -67,7 +60,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.3'
+      version: '2.7'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="

data/lib/json/add/bigdecimal.rb

@@ -1,58 +0,0 @@
-# frozen_string_literal: true
-unless defined?(::JSON::JSON_LOADED) and ::JSON::JSON_LOADED
-  require 'json'
-end
-begin
-  require 'bigdecimal'
-rescue LoadError
-end
-
-class BigDecimal
-
-  # See #as_json.
-  def self.json_create(object)
-    BigDecimal._load object['b']
-  end
-
-  # Methods <tt>BigDecimal#as_json</tt> and +BigDecimal.json_create+ may be used
-  # to serialize and deserialize a \BigDecimal object;
-  # see Marshal[https://docs.ruby-lang.org/en/master/Marshal.html].
-  #
-  # \Method <tt>BigDecimal#as_json</tt> serializes +self+,
-  # returning a 2-element hash representing +self+:
-  #
-  #   require 'json/add/bigdecimal'
-  #   x = BigDecimal(2).as_json             # => {"json_class"=>"BigDecimal", "b"=>"27:0.2e1"}
-  #   y = BigDecimal(2.0, 4).as_json        # => {"json_class"=>"BigDecimal", "b"=>"36:0.2e1"}
-  #   z = BigDecimal(Complex(2, 0)).as_json # => {"json_class"=>"BigDecimal", "b"=>"27:0.2e1"}
-  #
-  # \Method +JSON.create+ deserializes such a hash, returning a \BigDecimal object:
-  #
-  #   BigDecimal.json_create(x) # => 0.2e1
-  #   BigDecimal.json_create(y) # => 0.2e1
-  #   BigDecimal.json_create(z) # => 0.2e1
-  #
-  def as_json(*)
-    {
-      JSON.create_id => self.class.name,
-      'b'            => _dump,
-    }
-  end
-
-  # Returns a JSON string representing +self+:
-  #
-  #   require 'json/add/bigdecimal'
-  #   puts BigDecimal(2).to_json
-  #   puts BigDecimal(2.0, 4).to_json
-  #   puts BigDecimal(Complex(2, 0)).to_json
-  #
-  # Output:
-  #
-  #   {"json_class":"BigDecimal","b":"27:0.2e1"}
-  #   {"json_class":"BigDecimal","b":"36:0.2e1"}
-  #   {"json_class":"BigDecimal","b":"27:0.2e1"}
-  #
-  def to_json(*args)
-    as_json.to_json(*args)
-  end
-end if defined?(::BigDecimal)

data/lib/json/add/complex.rb

@@ -1,51 +0,0 @@
-# frozen_string_literal: true
-unless defined?(::JSON::JSON_LOADED) and ::JSON::JSON_LOADED
-  require 'json'
-end
-
-class Complex
-
-  # See #as_json.
-  def self.json_create(object)
-    Complex(object['r'], object['i'])
-  end
-
-  # Methods <tt>Complex#as_json</tt> and +Complex.json_create+ may be used
-  # to serialize and deserialize a \Complex object;
-  # see Marshal[https://docs.ruby-lang.org/en/master/Marshal.html].
-  #
-  # \Method <tt>Complex#as_json</tt> serializes +self+,
-  # returning a 2-element hash representing +self+:
-  #
-  #   require 'json/add/complex'
-  #   x = Complex(2).as_json      # => {"json_class"=>"Complex", "r"=>2, "i"=>0}
-  #   y = Complex(2.0, 4).as_json # => {"json_class"=>"Complex", "r"=>2.0, "i"=>4}
-  #
-  # \Method +JSON.create+ deserializes such a hash, returning a \Complex object:
-  #
-  #   Complex.json_create(x) # => (2+0i)
-  #   Complex.json_create(y) # => (2.0+4i)
-  #
-  def as_json(*)
-    {
-      JSON.create_id => self.class.name,
-      'r'            => real,
-      'i'            => imag,
-    }
-  end
-
-  # Returns a JSON string representing +self+:
-  #
-  #   require 'json/add/complex'
-  #   puts Complex(2).to_json
-  #   puts Complex(2.0, 4).to_json
-  #
-  # Output:
-  #
-  #   {"json_class":"Complex","r":2,"i":0}
-  #   {"json_class":"Complex","r":2.0,"i":4}
-  #
-  def to_json(*args)
-    as_json.to_json(*args)
-  end
-end

data/lib/json/add/core.rb

@@ -1,12 +0,0 @@
-# frozen_string_literal: true
-# This file requires the implementations of ruby core's custom objects for
-# serialisation/deserialisation.
-
-require 'json/add/date'
-require 'json/add/date_time'
-require 'json/add/exception'
-require 'json/add/range'
-require 'json/add/regexp'
-require 'json/add/struct'
-require 'json/add/symbol'
-require 'json/add/time'

data/lib/json/add/date.rb

@@ -1,54 +0,0 @@
-# frozen_string_literal: true
-unless defined?(::JSON::JSON_LOADED) and ::JSON::JSON_LOADED
-  require 'json'
-end
-require 'date'
-
-class Date
-
-  # See #as_json.
-  def self.json_create(object)
-    civil(*object.values_at('y', 'm', 'd', 'sg'))
-  end
-
-  alias start sg unless method_defined?(:start)
-
-  # Methods <tt>Date#as_json</tt> and +Date.json_create+ may be used
-  # to serialize and deserialize a \Date object;
-  # see Marshal[https://docs.ruby-lang.org/en/master/Marshal.html].
-  #
-  # \Method <tt>Date#as_json</tt> serializes +self+,
-  # returning a 2-element hash representing +self+:
-  #
-  #   require 'json/add/date'
-  #   x = Date.today.as_json
-  #   # => {"json_class"=>"Date", "y"=>2023, "m"=>11, "d"=>21, "sg"=>2299161.0}
-  #
-  # \Method +JSON.create+ deserializes such a hash, returning a \Date object:
-  #
-  #   Date.json_create(x)
-  #   # => #<Date: 2023-11-21 ((2460270j,0s,0n),+0s,2299161j)>
-  #
-  def as_json(*)
-    {
-      JSON.create_id => self.class.name,
-      'y' => year,
-      'm' => month,
-      'd' => day,
-      'sg' => start,
-    }
-  end
-
-  # Returns a JSON string representing +self+:
-  #
-  #   require 'json/add/date'
-  #   puts Date.today.to_json
-  #
-  # Output:
-  #
-  #   {"json_class":"Date","y":2023,"m":11,"d":21,"sg":2299161.0}
-  #
-  def to_json(*args)
-    as_json.to_json(*args)
-  end
-end

data/lib/json/add/date_time.rb

@@ -1,67 +0,0 @@
-# frozen_string_literal: true
-unless defined?(::JSON::JSON_LOADED) and ::JSON::JSON_LOADED
-  require 'json'
-end
-require 'date'
-
-class DateTime
-
-  # See #as_json.
-  def self.json_create(object)
-    args = object.values_at('y', 'm', 'd', 'H', 'M', 'S')
-    of_a, of_b = object['of'].split('/')
-    if of_b and of_b != '0'
-      args << Rational(of_a.to_i, of_b.to_i)
-    else
-      args << of_a
-    end
-    args << object['sg']
-    civil(*args)
-  end
-
-  alias start sg unless method_defined?(:start)
-
-  # Methods <tt>DateTime#as_json</tt> and +DateTime.json_create+ may be used
-  # to serialize and deserialize a \DateTime object;
-  # see Marshal[https://docs.ruby-lang.org/en/master/Marshal.html].
-  #
-  # \Method <tt>DateTime#as_json</tt> serializes +self+,
-  # returning a 2-element hash representing +self+:
-  #
-  #   require 'json/add/datetime'
-  #   x = DateTime.now.as_json
-  #   # => {"json_class"=>"DateTime", "y"=>2023, "m"=>11, "d"=>21, "sg"=>2299161.0}
-  #
-  # \Method +JSON.create+ deserializes such a hash, returning a \DateTime object:
-  #
-  #   DateTime.json_create(x) # BUG? Raises Date::Error "invalid date"
-  #
-  def as_json(*)
-    {
-      JSON.create_id => self.class.name,
-      'y' => year,
-      'm' => month,
-      'd' => day,
-      'H' => hour,
-      'M' => min,
-      'S' => sec,
-      'of' => offset.to_s,
-      'sg' => start,
-    }
-  end
-
-  # Returns a JSON string representing +self+:
-  #
-  #   require 'json/add/datetime'
-  #   puts DateTime.now.to_json
-  #
-  # Output:
-  #
-  #   {"json_class":"DateTime","y":2023,"m":11,"d":21,"sg":2299161.0}
-  #
-  def to_json(*args)
-    as_json.to_json(*args)
-  end
-end
-
-

data/lib/json/add/exception.rb

@@ -1,49 +0,0 @@
-# frozen_string_literal: true
-unless defined?(::JSON::JSON_LOADED) and ::JSON::JSON_LOADED
-  require 'json'
-end
-
-class Exception
-
-  # See #as_json.
-  def self.json_create(object)
-    result = new(object['m'])
-    result.set_backtrace object['b']
-    result
-  end
-
-  # Methods <tt>Exception#as_json</tt> and +Exception.json_create+ may be used
-  # to serialize and deserialize a \Exception object;
-  # see Marshal[https://docs.ruby-lang.org/en/master/Marshal.html].
-  #
-  # \Method <tt>Exception#as_json</tt> serializes +self+,
-  # returning a 2-element hash representing +self+:
-  #
-  #   require 'json/add/exception'
-  #   x = Exception.new('Foo').as_json # => {"json_class"=>"Exception", "m"=>"Foo", "b"=>nil}
-  #
-  # \Method +JSON.create+ deserializes such a hash, returning a \Exception object:
-  #
-  #   Exception.json_create(x) # => #<Exception: Foo>
-  #
-  def as_json(*)
-    {
-      JSON.create_id => self.class.name,
-      'm'            => message,
-      'b'            => backtrace,
-    }
-  end
-
-  # Returns a JSON string representing +self+:
-  #
-  #   require 'json/add/exception'
-  #   puts Exception.new('Foo').to_json
-  #
-  # Output:
-  #
-  #   {"json_class":"Exception","m":"Foo","b":null}
-  #
-  def to_json(*args)
-    as_json.to_json(*args)
-  end
-end

data/lib/json/add/ostruct.rb

@@ -1,54 +0,0 @@
-# frozen_string_literal: true
-unless defined?(::JSON::JSON_LOADED) and ::JSON::JSON_LOADED
-  require 'json'
-end
-begin
-  require 'ostruct'
-rescue LoadError
-end
-
-class OpenStruct
-
-  # See #as_json.
-  def self.json_create(object)
-    new(object['t'] || object[:t])
-  end
-
-  # Methods <tt>OpenStruct#as_json</tt> and +OpenStruct.json_create+ may be used
-  # to serialize and deserialize a \OpenStruct object;
-  # see Marshal[https://docs.ruby-lang.org/en/master/Marshal.html].
-  #
-  # \Method <tt>OpenStruct#as_json</tt> serializes +self+,
-  # returning a 2-element hash representing +self+:
-  #
-  #   require 'json/add/ostruct'
-  #   x = OpenStruct.new('name' => 'Rowdy', :age => nil).as_json
-  #   # => {"json_class"=>"OpenStruct", "t"=>{:name=>'Rowdy', :age=>nil}}
-  #
-  # \Method +JSON.create+ deserializes such a hash, returning a \OpenStruct object:
-  #
-  #   OpenStruct.json_create(x)
-  #   # => #<OpenStruct name='Rowdy', age=nil>
-  #
-  def as_json(*)
-    klass = self.class.name
-    klass.to_s.empty? and raise JSON::JSONError, "Only named structs are supported!"
-    {
-      JSON.create_id => klass,
-      't'            => table,
-    }
-  end
-
-  # Returns a JSON string representing +self+:
-  #
-  #   require 'json/add/ostruct'
-  #   puts OpenStruct.new('name' => 'Rowdy', :age => nil).to_json
-  #
-  # Output:
-  #
-  #   {"json_class":"OpenStruct","t":{'name':'Rowdy',"age":null}}
-  #
-  def to_json(*args)
-    as_json.to_json(*args)
-  end
-end if defined?(::OpenStruct)