<%= raw User.find(params[:id]).to_json %>

<%= raw inside_something(User.find(params[:id]).to_json) %>

<%= raw call_something(params).to_json %>

<%= raw params[:stuff].to_json %>

Add the tests for to_json XSS in Rails 4
Add the tests for to_json XSS in Rails 4

this was supposed to be part of 5ffafd809fbfdd0481609210443fcec7fd5a08b8
