rufus-json 1.0.2 → 1.0.3

data/CHANGELOG.txt

@@ -2,7 +2,13 @@
 = rufus-json CHANGELOG.txt
 
 
-== rufus-json - 1.0.2    not yet released
+== rufus-json - 1.0.3    released 2013/02/12
+
+- JSON.parse(s, :create_additions => false)
+  see https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/4_YvCpLzL58
+
+
+== rufus-json - 1.0.2    released 2012/05/24
 
 
 == rufus-json - 1.0.1    released 2011/06/01

data/LICENSE.txt

@@ -1,5 +1,5 @@
 
-Copyright (c) 2009-2012, John Mettraux, jmettraux@gmail.com
+Copyright (c) 2009-2013, John Mettraux, jmettraux@gmail.com
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/lib/rufus-json/automatic.rb

@@ -1,5 +1,5 @@
 #--
-# Copyright (c) 2009-2012, John Mettraux, jmettraux@gmail.com
+# Copyright (c) 2009-2013, John Mettraux, jmettraux@gmail.com
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/rufus/json.rb

@@ -1,5 +1,5 @@
 #--
-# Copyright (c) 2009-2012, John Mettraux, jmettraux@gmail.com
+# Copyright (c) 2009-2013, John Mettraux, jmettraux@gmail.com
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -28,7 +28,7 @@ require 'ostruct'
 module Rufus
 module Json
 
-  VERSION = '1.0.2'
+  VERSION = '1.0.3'
 
   # The JSON / JSON pure decoder
   #
@@ -47,7 +47,11 @@ module Json
         :indent => '  ', :object_nl => "\n", :array_nl => "\n", :space => ' ')
     },
     :decode => lambda { |s|
-      ::JSON.parse("[#{s}]", :max_nesting => nil).first },
+      ::JSON.parse(
+        "[#{s}]",
+        :max_nesting => nil,
+        :create_additions => false
+      ).first },
     :error => lambda {
       ::JSON::ParserError }
   )

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: rufus-json
 version: !ruby/object:Gem::Version 
-  hash: 19
+  hash: 17
   prerelease: 
   segments: 
   - 1
   - 0
-  - 2
-  version: 1.0.2
+  - 3
+  version: 1.0.3
 platform: ruby
 authors: 
 - John Mettraux
@@ -16,7 +16,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2012-05-24 00:00:00 Z
+date: 2013-02-11 00:00:00 Z
 dependencies: 
 - !ruby/object:Gem::Dependency 
   name: json