kotovalexarian-likes-github/ruby--ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00
Code Releases Activity

Also ignored cve_2014_8080_spec

Browse source
This commit is contained in:
Hiroshi SHIBATA 2020-01-12 09:15:46 +09:00 committed by SHIBATA Hiroshi
parent e61cab3a36
commit c7ef7d8a73
Notes: git 2020-01-12 12:29:06 +09:00 
Merged: https://github.com/ruby/ruby/pull/2832
1 changed files with 27 additions and 24 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
spec/ruby/security/cve_2014_8080_spec.rb
View file

@ -1,8 +1,10 @@
require_relative '../spec_helper'
require 'rexml/document'
describe "REXML::Document.new" do
ruby_version_is ''...'2.8' do
require 'rexml/document'
describe "REXML::Document.new" do
it "resists CVE-2014-8080 by raising an exception when entity expansion has grown too large" do
xml = <<XML
@ -29,4 +31,5 @@ XML
}.should raise_error(REXML::ParseException, /entity expansion has grown too large/)
end
end
end