rails/rails — pull request #12201 by chancancode (2013-09-11 23:54:06+00:00)
Title: Replace JSON.load with JSON.parse

From http://www.ruby-doc.org/stdlib-2.0/libdoc/json/rdoc/JSON.html#method-i-load

BEWARE: This method is meant to serialise data from trusted user
input, like from your own database server or clients under your
control, it could be dangerous to allow untrusted users to pass
JSON sources into it. The default options for the parser can be
changed via the ::load_default_options method.