diff options
Diffstat (limited to 'app/models/concerns/blocks_json_serialization.rb')
-rw-r--r-- | app/models/concerns/blocks_json_serialization.rb | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/app/models/concerns/blocks_json_serialization.rb b/app/models/concerns/blocks_json_serialization.rb new file mode 100644 index 00000000000..cb70c22e207 --- /dev/null +++ b/app/models/concerns/blocks_json_serialization.rb @@ -0,0 +1,14 @@ +# Overrides `as_json` and `to_json` to raise an exception when called in order +# to prevent accidentally exposing attributes +# +# Not that that would ever happen... but just in case. +module BlocksJsonSerialization + extend ActiveSupport::Concern + + def to_json + raise SecurityError, + "JSON serialization has been disabled on #{self.class.name}" + end + + alias_method :as_json, :to_json +end |