kotovalexarian-likes-github/ruby--ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00
Code Releases Activity

* lib/cgi/session.rb (CGI::Session::FileStore#initialize): untaint

Browse source 
session id after check.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@6813 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
shugo 2004-08-24 05:35:12 +00:00
parent 99439f54ea
commit b9b4a769f1
2 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
ChangeLog
View file

@ -1,3 +1,8 @@
Tue Aug 24 14:32:17 2004 Shugo Maeda <shugo@ruby-lang.org>
* lib/cgi/session.rb (CGI::Session::FileStore#initialize): untaint
session id after check.
Tue Aug 24 08:57:51 2004 GOTOU Yuuzou <gotoyuzo@notwork.org> Tue Aug 24 08:57:51 2004 GOTOU Yuuzou <gotoyuzo@notwork.org>
* ext/openssl/ossl_x509attr.c (ossl_x509attr_initialize): d2i * ext/openssl/ossl_x509attr.c (ossl_x509attr_initialize): d2i

2
lib/cgi/session.rb
View file

@ -364,7 +364,7 @@ class CGI
unless check_id(id) unless check_id(id)
raise ArgumentError, "session_id `%s' is invalid" % id raise ArgumentError, "session_id `%s' is invalid" % id
end end
@path = dir+"/"+prefix+id @path = dir+"/"+prefix+id.dup.untaint
unless File::exist? @path unless File::exist? @path
@hash = {} @hash = {}
end end