Skip to content

Conversation

@debbbbie
Copy link

@debbbbie debbbbie commented Feb 5, 2015

No description provided.

@nicolasblanco
Copy link
Owner

Hey thanks for your PR !

Do you know if there may be security issues with the fact to accept JSON ?

@iMacTia
Copy link
Collaborator

iMacTia commented Sep 19, 2018

I'm not entirely convinced about this.
If my request contains a JSON, then my whole request body should be of type JSON and Rails would parse that for me automatically (so that would be validated as an Hash).
Having a JSON structure in the params makes me feel like something strange or wrong is going on and that shouldn't really happen...

Do you have a real-world scenario of when this might happen?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants