Skip to content
  • 卜部昌平's avatar
    1b5f0ee6
    merge revision(s) 16420,16454: · 1b5f0ee6
    卜部昌平 authored
    	* file.c (file_expand_path): support for alternative data stream
    	  and ignored trailing garbages of NTFS.
    	* file.c (rb_file_s_basename): ditto.
    	* file.c (rb_file_s_extname): ditto.
    	* lib/webrick/httpservlet/filehandler.rb: should normalize path
    	  name in path_info to prevent script disclosure vulnerability on
    	  DOSISH filesystems. (fix: CVE-2008-1891)
    	  Note: NTFS/FAT filesystem should not be published by the platforms
    	  other than Windows. Pathname interpretation (including short
    	  filename) is less than perfect.
    	* lib/webrick/httpservlet/abstract.rb
    	  (WEBrick::HTTPServlet::AbstracServlet#redirect_to_directory_uri):
    	  should escape the value of Location: header.
    	* lib/webrick/httpservlet/cgi_runner.rb: accept interpreter
    	  command line arguments.
    
    
    git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_6@17303 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
    1b5f0ee6
    merge revision(s) 16420,16454:
    卜部昌平 authored
    	* file.c (file_expand_path): support for alternative data stream
    	  and ignored trailing garbages of NTFS.
    	* file.c (rb_file_s_basename): ditto.
    	* file.c (rb_file_s_extname): ditto.
    	* lib/webrick/httpservlet/filehandler.rb: should normalize path
    	  name in path_info to prevent script disclosure vulnerability on
    	  DOSISH filesystems. (fix: CVE-2008-1891)
    	  Note: NTFS/FAT filesystem should not be published by the platforms
    	  other than Windows. Pathname interpretation (including short
    	  filename) is less than perfect.
    	* lib/webrick/httpservlet/abstract.rb
    	  (WEBrick::HTTPServlet::AbstracServlet#redirect_to_directory_uri):
    	  should escape the value of Location: header.
    	* lib/webrick/httpservlet/cgi_runner.rb: accept interpreter
    	  command line arguments.
    
    
    git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_6@17303 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Loading