title: security of `JSON.parse()` in Ruby?
body: <p>Can I <code>JSON.parse</code> untrusted data and then validate its structure (e.g., map from strings to array of strings)? Or can bad stuff happen just from parsing <code>JSON</code> (like with <code>Marshal</code>, which is inherently unsafe against remote code execution)?</p>