SECURITY: use strict JSON parsing when parsing backup metadata
This commit is contained in:
parent
ad7a13921f
commit
65831f4d3e
@ -220,7 +220,7 @@ module BackupRestore
|
||||
)
|
||||
end
|
||||
|
||||
data = Oj.load_file(@meta_filename)
|
||||
data = JSON.parse File.read(@meta_filename)
|
||||
raise "Failed to load metadata file." if !data
|
||||
data
|
||||
else
|
||||
|
||||
Reference in New Issue
Block a user