1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00
ruby--ruby/lib
usa bbda1a0274 merge revision(s) 62968:
webrick: prevent response splitting and header injection

	Original patch by tenderlove (with minor style adjustments).

	* lib/webrick/httpresponse.rb (send_header): call check_header
	  (check_header): raise on embedded CRLF in header value
	* test/webrick/test_httpresponse.rb
	  (test_prevent_response_splitting_headers): new test
	* (test_prevent_response_splitting_cookie_headers): ditto

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_2@63022 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
2018-03-28 14:50:27 +00:00
..
cgi * lib/cgi/session/pstore.rb: separated sample code. 2014-08-10 01:34:50 +00:00
drb merge revision(s) 55008: [Backport #12342] 2016-08-16 05:53:14 +00:00
irb merge revision(s) 57027: [Backport #13012] 2017-03-25 15:09:48 +00:00
matrix * lib/matrix/eigenvalue_decomposition: Style fix 2014-07-18 10:11:18 +00:00
net merge revision(s) 61242: [Backport #14185] 2017-12-14 13:53:48 +00:00
optparse * lib/cgi/core.rb: remove unused variables. 2014-07-27 11:04:28 +00:00
racc * lib/cgi/core.rb: remove unused variables. 2014-07-27 11:04:28 +00:00
rake * lib/rake: Update to rake 10.4.2 2014-12-06 00:22:51 +00:00
rbconfig * tool/mkconfig.rb: remove not to require rbconfig/obsolete.rb. 2014-07-07 02:07:01 +00:00
rdoc merge revision(s) 49223: [Backport #10732] 2015-01-19 02:45:40 +00:00
rexml merge revision(s) 55726,55727: [Backport #12609] 2016-08-16 04:39:33 +00:00
rinda * lib/rinda/ring.rb: split executable code into sample directory. 2014-08-21 04:23:56 +00:00
rss merge revision(s) 51766,51767: [Backport #11509] 2015-09-29 18:45:50 +00:00
rubygems merge revision(s) 58471,58493,62436: [Backport #13505] 2018-02-16 16:27:56 +00:00
shell * lib/shell/process-controller.rb: removed commented-out code. 2014-08-26 02:44:26 +00:00
unicode_normalize tables.rb: add 2014-11-11 17:41:53 +00:00
uri merge revision(s) 56166: [Backport #12766] 2016-09-30 15:57:06 +00:00
webrick merge revision(s) 62968: 2018-03-28 14:50:27 +00:00
xmlrpc merge revision(s) 53318: [Backport #11489] 2016-03-09 14:01:02 +00:00
yaml
abbrev.rb * lib/abbrev.rb: remove executable. 2014-07-11 08:16:05 +00:00
base64.rb
benchmark.rb lib/benchmark.rb: remove CLOCK_MONOTONIC_RAW support 2014-09-11 08:09:07 +00:00
cgi.rb * lib/cgi.rb: remove needless condition for old ruby version. 2014-08-07 06:14:29 +00:00
cmath.rb merge revision(s) 50793,51120: [Backport #11162] 2015-07-03 19:31:05 +00:00
csv.rb * remove trailing spaces. 2014-11-04 03:21:53 +00:00
debug.rb * lib/debug.rb: [DOC] Fix typo 2013-12-14 14:48:36 +00:00
delegate.rb * lib/delegate.rb: split executable code into sample directory. 2014-07-26 17:11:56 +00:00
drb.rb
e2mmap.rb * lib/e2mmap.rb: remove needless instance variables. 2014-08-24 07:16:25 +00:00
English.rb * lib/English.rb: [DOC] $LOADED_FEATURES moved to load.c [Fixes GH-620] 2014-05-31 19:54:55 +00:00
erb.rb erb: set variables from the command line 2014-12-12 10:48:57 +00:00
fileutils.rb merge revision(s) 57640: [Backport #13214] 2017-03-25 18:24:28 +00:00
find.rb * lib/find.rb (Find.find): Call to_path for arguments to obtain 2014-10-13 07:34:23 +00:00
forwardable.rb merge revision(s) 53383,55366: [Backport #12478] 2017-03-25 14:43:16 +00:00
getoptlong.rb
ipaddr.rb merge revision(s) 52244: [Backport #11513] 2015-11-24 15:49:21 +00:00
irb.rb merge revision(s) 53943: [Backport #11969] 2016-03-28 15:07:06 +00:00
logger.rb merge revision(s) 56374: [Backport #12822] 2016-10-27 07:47:14 +00:00
mathn.rb lib/mathn.rb: remove built-in methods 2014-08-26 12:07:57 +00:00
matrix.rb * lib.matrix.rb: Fix typo. Patch by Dimitrios Zorbas. [GH-772] 2014-11-27 01:03:46 +00:00
mkmf.rb merge revision(s) 53566: 2017-03-26 16:42:03 +00:00
monitor.rb
mutex_m.rb
observer.rb * lib/drb/acl.rb: Removed meaningless #to_s methods in interpolation. 2014-08-27 12:21:41 +00:00
open-uri.rb * lib/open-uri.rb (OpenURI.open_http): refactoring of r48941. 2014-12-24 09:11:05 +00:00
open3.rb * lib/open3.rb: fix code formatting in documentation by @JoshCheek 2014-11-04 03:09:28 +00:00
optionparser.rb lib/optionparser.rb 2014-05-26 03:25:38 +00:00
optparse.rb merge revision(s) 57775: [Backport #13281] 2017-03-25 18:28:27 +00:00
ostruct.rb merge revision(s) 57887: [Backport #13159] 2017-03-25 18:35:09 +00:00
pp.rb * lib/pp.rb (File::Stat#pritty_print): some platforms (such as Windows) 2014-12-05 19:35:19 +00:00
prettyprint.rb * lib/prettyprint.rb: removed PrettyPrint#first? 2014-08-22 02:38:59 +00:00
prime.rb * lib/prime.rb: Remove useless loop and block capture. 2014-12-10 20:38:13 +00:00
profile.rb
profiler.rb
pstore.rb * lib/pstore.rb: split executable code into sample directory. 2014-07-23 19:31:18 +00:00
rake.rb * lib/rake: Update to rake 10.4.2 2014-12-06 00:22:51 +00:00
rdoc.rb * lib/rdoc: Update to RDoc 4.2.0. 2014-12-07 01:22:37 +00:00
resolv-replace.rb
resolv.rb merge revision(s) 49095: [Backport #11150] 2015-05-19 17:05:35 +00:00
rss.rb
rubygems.rb merge revision(s) 58471,58493,62436: [Backport #13505] 2018-02-16 16:27:56 +00:00
scanf.rb minor rdoc typo 2014-02-15 01:33:03 +00:00
securerandom.rb merge revision(s) 54144: [Backport #12139] 2016-04-22 09:17:57 +00:00
set.rb * lib/set.rb (Set#replace): Check if an object given is enumerable 2014-08-06 11:28:21 +00:00
shell.rb * lib/e2mmap.rb: remove needless instance variables. 2014-08-24 07:16:25 +00:00
shellwords.rb * lib/shellwords.rb: proofreading documentation. 2014-09-05 10:00:46 +00:00
singleton.rb
sync.rb
tempfile.rb tempfile.rb: fix r47655 2014-09-21 01:40:21 +00:00
thwait.rb * lib/drb/drb.rb: use attr_reader instead of Module#attr. 2014-08-27 12:10:21 +00:00
time.rb merge revision(s) 49788,49790: [Backport #10904] 2015-08-03 19:11:41 +00:00
timeout.rb merge revision(s) 51213: [Backport #11344] 2015-08-10 17:08:37 +00:00
tmpdir.rb merge revision(s) 62990: 2018-03-28 14:34:14 +00:00
tracer.rb
tsort.rb * lib/tsort.rb: Returns an enumerator if no block is given. 2014-11-26 10:46:50 +00:00
ubygems.rb
un.rb
unicode_normalize.rb merge revision(s) 49064: [Backport #10675] 2015-01-16 02:06:34 +00:00
uri.rb bump URI::VERSION to 0.10.0 2014-11-03 00:33:44 +00:00
weakref.rb * lib/weakref.rb: split executable code into sample directory. 2014-07-26 17:12:11 +00:00
webrick.rb
xmlrpc.rb * lib/xmlrpc.rb: [DOC] fix typo. 2013-12-12 03:09:19 +00:00
yaml.rb Revert "Revert "* lib/yaml.rb: Remove Psych::EngineManager [Bug #8344]"" 2014-06-26 02:52:46 +00:00