kotovalexarian-likes-github/ruby--ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00
Code Releases Activity

* lib/net/smtp.rb (send0): do taint check only when $SAFE > 0

Browse source 
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@4214 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
aamine 2003-07-29 13:29:53 +00:00
parent 42f3ae0286
commit f1d9d32a67
2 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
ChangeLog
View file

@ -1,3 +1,7 @@
Tue Jul 29 22:36:50 2003 Minero Aoki <aamine@loveruby.net>
* lib/net/smtp.rb (send0): do taint check only when $SAFE > 0
Tue Jul 29 19:20:34 2003 WATANABE Hirofumi <eban@ruby-lang.org> Tue Jul 29 19:20:34 2003 WATANABE Hirofumi <eban@ruby-lang.org>
* lib/fileutils.rb (install): support preserve timestamp. * lib/fileutils.rb (install): support preserve timestamp.

8
lib/net/smtp.rb
View file

@ -490,9 +490,11 @@ module Net
def send0( from_addr, to_addrs ) def send0( from_addr, to_addrs )
raise IOError, 'closed session' unless @socket raise IOError, 'closed session' unless @socket
raise ArgumentError, 'mail destination does not given' if to_addrs.empty? raise ArgumentError, 'mail destination does not given' if to_addrs.empty?
raise SecurityError, 'tainted from_addr' if from_addr.tainted? if $SAFE > 0
to_addrs.each do |to| raise SecurityError, 'tainted from_addr' if from_addr.tainted?
raise SecurityError, 'tainted to_addr' if to.tainted? to_addrs.each do |to|
raise SecurityError, 'tainted to_addr' if to.tainted?
end
end end
mailfrom from_addr mailfrom from_addr