From d0a62f3ced7560daba2ad546d83f0479a5ae2cf2 Mon Sep 17 00:00:00 2001 From: Florian Frank Date: Mon, 4 Feb 2013 23:28:30 +0100 Subject: Security fix create_additons/JSON::GenericObject --- java/src/json/ext/Parser.java | 2 +- java/src/json/ext/Parser.rl | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) (limited to 'java') diff --git a/java/src/json/ext/Parser.java b/java/src/json/ext/Parser.java index ab3585e..6cb5886 100644 --- a/java/src/json/ext/Parser.java +++ b/java/src/json/ext/Parser.java @@ -166,7 +166,7 @@ public class Parser extends RubyObject { this.symbolizeNames = opts.getBool("symbolize_names", false); this.quirksMode = opts.getBool("quirks_mode", false); this.createId = opts.getString("create_id", getCreateId(context)); - this.createAdditions = opts.getBool("create_additions", true); + this.createAdditions = opts.getBool("create_additions", false); this.objectClass = opts.getClass("object_class", runtime.getHash()); this.arrayClass = opts.getClass("array_class", runtime.getArray()); this.match_string = opts.getHash("match_string"); diff --git a/java/src/json/ext/Parser.rl b/java/src/json/ext/Parser.rl index e26637d..6dd335a 100644 --- a/java/src/json/ext/Parser.rl +++ b/java/src/json/ext/Parser.rl @@ -164,7 +164,7 @@ public class Parser extends RubyObject { this.symbolizeNames = opts.getBool("symbolize_names", false); this.quirksMode = opts.getBool("quirks_mode", false); this.createId = opts.getString("create_id", getCreateId(context)); - this.createAdditions = opts.getBool("create_additions", true); + this.createAdditions = opts.getBool("create_additions", false); this.objectClass = opts.getClass("object_class", runtime.getHash()); this.arrayClass = opts.getClass("array_class", runtime.getArray()); this.match_string = opts.getHash("match_string"); -- cgit v1.2.1