A few further notes on this, following some reading... The docs aren't very clear about it, either (http://flori.github.com/json/doc/index.html http://flori.git

A few further notes on this, following some reading... The docs aren't very clear about it, either (http://flori.github.com/json/doc/index.html http://flori.github.com/json/doc/index.html). There is a JSON.parse! method that they explicitly say is to be used only for trusted input, and it looks like JSON.load has some of the same default options. To further confuse things, JSON.load has the very useful property that you can pass it a String or an IO (e.g. from Rack::Request#body), whereas JSON.parse only accepts a String. edit: the docs will soon contain a warning about JSON.load; see https://github.com/flori/json/blob/master/lib/json/common.rb https://github.com/flori/json/blob/master/lib/json/common.rb