security: Client class uses eval() to parse JSON

[tdilauro]

Use of eval() on unsanitized responses is generally unsafe.

Some Client class methods use eval() to convert JSON to a hash with symbols as keys.

[okleinschmidt]

Sorry, I'm still learning. So means JSON.parse would be better?:

def system_information
  response = get("#{@config['url']}/api/2.1/rest/system_information", {accept: :json, :cookies => cookies})
  JSON.parse(response)['system_information']
end

[tdilauro]

No worries. I'm just tracking things that come up as I look through the code. I'm going to work on fixing some of these.

[okleinschmidt]

Thanks a lot. Send you an invite to collaborate.

[tdilauro]

Issue #5 is blocking this issue for me. Will need a work-around.

[tdilauro]

Resolved. Closing.