ruby.git/test/json/json_generator_test.rb, branch v3_3_11 The Ruby Programming Language [flori/json] The modern Ruby uses utf-8 encodings by default 2023-12-05T03:04:10+00:00 Hiroshi SHIBATA hsbt@ruby-lang.org 2023-12-05T01:41:01+00:00 abc3d124f79abae6ea9072fe6a3e70486c1fbe58 https://github.com/flori/json/commit/11b31210ac 
https://github.com/flori/json/commit/11b31210ac
[flori/json] Overload kwargs in JSON.dump 2023-12-05T03:04:08+00:00 Takashi Kokubun takashikkbn@gmail.com 2023-12-01T17:53:44+00:00 e6b35e8a6d70892037503d74cec2657b2b8bd116 https://github.com/flori/json/commit/936f280f9f 
https://github.com/flori/json/commit/936f280f9f
[flori/json] JSON.dump: handle unenclosed hashes regression 2023-12-05T03:04:07+00:00 Jean Boussier jean.boussier@gmail.com 2023-12-01T10:46:16+00:00 a22ed8943859963c67533bb0edc13a27bfdac00c Fix: https://github.com/flori/json/issues/553 We can never add keyword arguments to `dump` otherwise existing code using unenclosed hash will break. https://github.com/flori/json/commit/8e0076a3f2 
Fix: https://github.com/flori/json/issues/553

We can never add keyword arguments to `dump` otherwise
existing code using unenclosed hash will break.

https://github.com/flori/json/commit/8e0076a3f2
Manually merged from flori/json 2023-12-01T07:47:06+00:00 Hiroshi SHIBATA hsbt@ruby-lang.org 2023-12-01T06:51:26+00:00 86045fca24be94db7a9cbf7a9126e43c212dcc55 > https://github.com/flori/json/pull/525 > Rename escape_slash in script_safe and also escape E+2028 and E+2029 Co-authored-by: Jean Boussier <jean.boussier@gmail.com> > https://github.com/flori/json/pull/454 > Remove unnecessary initialization of create_id in JSON.parse() Co-authored-by: Watson <watson1978@gmail.com> 
  > https://github.com/flori/json/pull/525
  > Rename escape_slash in script_safe and also escape E+2028 and E+2029

  Co-authored-by: Jean Boussier <jean.boussier@gmail.com>

  > https://github.com/flori/json/pull/454
  > Remove unnecessary initialization of create_id in JSON.parse()

  Co-authored-by: Watson <watson1978@gmail.com>
Rename escape_slash in script_safe and also escape E+2028 and E+2029 2023-12-01T07:47:06+00:00 Jean Boussier jean.boussier@gmail.com 2023-04-13T17:22:29+00:00 0dfeb172968cdaefca2ab828c94d3e5f44d91f8f It is rather common to directly interpolate JSON string inside <script> tags in HTML as to provide configuration or parameters to a script. However this may lead to XSS vulnerabilities, to prevent that 3 characters need to be escaped: - `/` (forward slash) - `U+2028` (LINE SEPARATOR) - `U+2029` (PARAGRAPH SEPARATOR) The forward slash need to be escaped to prevent closing the script tag early, and the other two are valid JSON but invalid Javascript and can be used to break JS parsing. Given that the intent of escaping forward slash is the same than escaping U+2028 and U+2029, I chos to rename and repurpose the existing `escape_slash` option. 
It is rather common to directly interpolate JSON string inside
<script> tags in HTML as to provide configuration or parameters to a
script.

However this may lead to XSS vulnerabilities, to prevent that 3
characters need to be escaped:

  - `/` (forward slash)
  - `U+2028` (LINE SEPARATOR)
  - `U+2029` (PARAGRAPH SEPARATOR)

The forward slash need to be escaped to prevent closing the script
tag early, and the other two are valid JSON but invalid Javascript
and can be used to break JS parsing.

Given that the intent of escaping forward slash is the same than escaping
U+2028 and U+2029, I chos to rename and repurpose the existing `escape_slash`
option.
[flori/json] define_method is also private at Ruby 2.3 and 2.4 2023-10-11T06:45:17+00:00 Hiroshi SHIBATA hsbt@ruby-lang.org 2023-10-11T04:57:27+00:00 e42df781d95c9558fbf552eed6cd2c4e4bd3f782 https://github.com/flori/json/commit/3804f38bf4 
https://github.com/flori/json/commit/3804f38bf4
[flori/json] remove_method of Module is private at Ruby 2.3 and 2.4 2023-10-11T06:45:17+00:00 Hiroshi SHIBATA hsbt@ruby-lang.org 2023-10-11T04:55:39+00:00 1b19e9198d92e7eac3f3c5402243d6f7a052ede3 https://github.com/flori/json/commit/6cbadf6b6e 
https://github.com/flori/json/commit/6cbadf6b6e
Fixup 1851824b1c7b816e41b567b5310bb18ab6f9ff7a 2023-09-13T07:23:18+00:00 Hiroshi SHIBATA hsbt@ruby-lang.org 2023-09-13T07:23:18+00:00 c75d54a36ca94ec25b5eb31925a0414f998df78c 






[flori/json] alias_method is private on Ruby 2.3 and 2.4
2023-09-13T07:01:19+00:00

Hiroshi SHIBATA
hsbt@ruby-lang.org

2023-09-13T06:30:21+00:00

1851824b1c7b816e41b567b5310bb18ab6f9ff7a

https://github.com/flori/json/commit/573ef94bc5





https://github.com/flori/json/commit/573ef94bc5







Prevent a warning: method redefined; discarding old included
2023-09-05T08:29:53+00:00

Yusuke Endoh
mame@ruby-lang.org

2023-09-05T08:29:53+00:00

77db0ca6c881b6fc705873f471fe4c52bffc0d50

```
[ 3463/25719] JSONGeneratorTest#test_string_ext_included_calls_super/home/chkbuild/chkbuild/tmp/build/20230905T063003Z/ruby/test/json/json_generator_test.rb:411: warning: method redefined; discarding old included
/home/chkbuild/chkbuild/tmp/build/20230905T063003Z/ruby/test/json/json_generator_test.rb:399: warning: previous definition of included was here
```

http://rubyci.s3.amazonaws.com/debian10/ruby-master/log/20230905T063003Z.log.html.gz





```
[ 3463/25719] JSONGeneratorTest#test_string_ext_included_calls_super/home/chkbuild/chkbuild/tmp/build/20230905T063003Z/ruby/test/json/json_generator_test.rb:411: warning: method redefined; discarding old included
/home/chkbuild/chkbuild/tmp/build/20230905T063003Z/ruby/test/json/json_generator_test.rb:399: warning: previous definition of included was here
```

http://rubyci.s3.amazonaws.com/debian10/ruby-master/log/20230905T063003Z.log.html.gz