Security fix discovered by github

phcdevworks · Nov 1, 2024 · a4dccf0 · a4dccf0
1 parent 81af328
commit a4dccf0
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/lib/ruby_api_pack_cloudways/connection/cw_connect.rb b/lib/ruby_api_pack_cloudways/connection/cw_connect.rb
@@ -47,7 +47,7 @@ def handle_response(response)
 
       # Parse response from Cloudways API
       def parse_response(response)
-        Oj.load(response.body)
+        Oj.load(response.body, mode: :strict)
       rescue Oj::ParseError => e
         raise "Error parsing response: #{e.message}"
       end

diff --git a/lib/ruby_api_pack_cloudways/connection/cw_token.rb b/lib/ruby_api_pack_cloudways/connection/cw_token.rb
@@ -24,7 +24,7 @@ def cw_api_token
       private
 
       def parse_response(response)
-        Oj.load(response.body)
+        Oj.load(response.body, mode: :strict)
       rescue Oj::ParseError => e
         raise "Error parsing response: #{e.message}"
       end