Ruby

Ruby

Made by DeepSource

Insecure JSON method detected RB-SC1002

Security
Critical

These methods are meant to serialise data from trusted user input, like from your own database server or clients under your control, it could be dangerous to allow untrusted users to pass JSON sources into it.

Bad practice

JSON.load("{}")
JSON.restore("{}")

Recommended

JSON.parse("{}")