10a0d4b61d
separators in path_info to prevent directory traversal attacks on DOSISH platforms. reported by Digital Security Research Group [DSECRG-08-026]. * lib/webrick/httpservlet/filehandler.rb: pathnames which have not to be published should be checked case-insensitively. git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@15676 b2dd03c8-39d4-4d8f-98ff-823fe69b080e |
||
|---|---|---|
| .. | ||
| httpauth | ||
| httpservlet | ||
| accesslog.rb | ||
| cgi.rb | ||
| compat.rb | ||
| config.rb | ||
| cookie.rb | ||
| htmlutils.rb | ||
| httpauth.rb | ||
| httpproxy.rb | ||
| httprequest.rb | ||
| httpresponse.rb | ||
| https.rb | ||
| httpserver.rb | ||
| httpservlet.rb | ||
| httpstatus.rb | ||
| httputils.rb | ||
| httpversion.rb | ||
| log.rb | ||
| server.rb | ||
| ssl.rb | ||
| utils.rb | ||
| version.rb | ||