1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00
ruby--ruby/test
usa bbda1a0274 merge revision(s) 62968:
webrick: prevent response splitting and header injection

	Original patch by tenderlove (with minor style adjustments).

	* lib/webrick/httpresponse.rb (send_header): call check_header
	  (check_header): raise on embedded CRLF in header value
	* test/webrick/test_httpresponse.rb
	  (test_prevent_response_splitting_headers): new test
	* (test_prevent_response_splitting_cookie_headers): ditto

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_2@63022 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
2018-03-28 14:50:27 +00:00
..
-ext- merge revision(s) 55602: [Backport #12560] 2016-07-11 14:38:49 +00:00
base64
benchmark Ruby can delay arbitrarily because Ruby is not a realtime system, 2014-09-02 15:47:53 +00:00
bigdecimal merge revision(s) 55123,55129,55130,55133,55136: [Backport #12414] 2016-06-10 07:09:00 +00:00
cgi * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
coverage merge revision(s) 53424,55509: [Backport #12517] 2016-08-16 12:14:41 +00:00
csv * test/csv/test_row.rb: Added some missing tests in CSV. 2014-09-05 09:34:38 +00:00
date merge revision(s) 55410: [Backport #12488] 2016-08-16 12:01:03 +00:00
dbm * test/ruby/test_object.rb: Specify an exception class for rescue clause. 2014-11-11 15:28:17 +00:00
digest Make Digest() thread-safe. 2014-10-31 13:21:51 +00:00
drb merge revision(s) 55008: [Backport #12342] 2016-08-16 05:53:14 +00:00
dtrace * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
erb erb: suppress warnings 2014-12-12 19:59:22 +00:00
etc win32.c: login name encoding 2014-11-10 08:24:36 +00:00
fiddle merge revision(s) 55554: [Backport #12537] 2016-09-30 15:44:09 +00:00
fileutils merge revision(s) 57640: [Backport #13214] 2017-03-25 18:24:28 +00:00
gdbm merge revision(s) 51930: [Backport #12149] 2016-03-28 15:42:34 +00:00
io merge revision(s) 49797: [Backport #10923] 2015-04-12 15:46:26 +00:00
irb * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
json merge revision(s) 50339,50340,50342,50343: [Backport #10705] 2015-08-14 06:20:41 +00:00
lib merge revision(s) 49806: 2017-03-26 07:22:44 +00:00
logger merge revision(s) 56374: [Backport #12822] 2016-10-27 07:47:14 +00:00
matrix test_vector.rb: fix exception class 2014-11-19 23:57:56 +00:00
minitest * test/minitest/test_minitest_unit.rb: removed obsoleted condition 2014-08-09 01:28:50 +00:00
misc merge revision(s) 56224: [Backport #12785] 2016-12-27 09:17:23 +00:00
mkmf merge revision(s) 49482,49487: [Backport #10821] 2015-02-13 05:00:23 +00:00
monitor * test/monitor/test_monitor.rb: Use assert_join_threads. 2014-11-13 13:04:43 +00:00
net * test/net/ftp/test_ftp.rb (process_port_or_eprt): merge a part of 2017-12-14 15:08:49 +00:00
nkf
objspace merge revision(s) 52128,52133: [Backport #11271] 2015-11-27 20:43:31 +00:00
open-uri skip old OpenSSL 2014-12-13 07:12:56 +00:00
openssl asn1: fix out-of-bounds read in decoding constructed objects 2017-09-14 11:41:59 +00:00
optparse merge revision(s) 55228: [Backport #12438] 2016-06-10 08:49:54 +00:00
ostruct merge revision(s) 57515: [Backport #13169] 2017-03-25 16:35:25 +00:00
pathname * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
psych * ext/psych/lib/psych/visitors/to_ruby.rb: support objects that are 2014-12-01 21:35:11 +00:00
rake * lib/rake: Update to rake 10.4.2 2014-12-06 00:22:51 +00:00
rdoc merge revision(s) 49223: [Backport #10732] 2015-01-19 02:45:40 +00:00
readline merge revision(s) 49244: [Backport #6232] 2015-01-17 07:50:07 +00:00
resolv merge revision(s) 49095: [Backport #11150] 2015-05-19 17:05:35 +00:00
rexml merge revision(s) 53299: [Backport #11870] 2016-03-08 19:02:43 +00:00
rinda merge revision(s) 56625: [Backport #12936] 2016-11-14 18:54:47 +00:00
ripper merge revision(s) 53411,53425: [Backport #11932] 2016-02-14 16:38:32 +00:00
rss merge revision(s) 51766,51767: [Backport #11509] 2015-09-29 18:45:50 +00:00
ruby merge revision(s) 62992: 2018-03-28 14:38:39 +00:00
rubygems merge revision(s) 58471,58493,62436: [Backport #13505] 2018-02-16 16:27:56 +00:00
scanf
sdbm * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
shell * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
socket merge revision(s) 62991,63000: 2018-03-28 14:36:23 +00:00
stringio merge revision(s) 55602: [Backport #12560] 2016-07-11 14:38:49 +00:00
strscan strscan.c: encoding in messages 2014-08-03 01:56:31 +00:00
syslog
testunit * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
thread merge revision(s) 57477,57478,57479,57492: [Backport #12405] 2017-03-25 18:07:08 +00:00
uri merge revision(s) 56166: [Backport #12766] 2016-09-30 15:57:06 +00:00
webrick merge revision(s) 62968: 2018-03-28 14:50:27 +00:00
win32ole * remove trailing spaces. 2014-12-22 12:31:59 +00:00
xmlrpc merge revision(s) 53318: [Backport #11489] 2016-03-09 14:01:02 +00:00
zlib merge revision(s) 54002: [Backport #12151] 2016-03-28 15:43:53 +00:00
runner.rb * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
test_abbrev.rb
test_cmath.rb
test_delegate.rb
test_find.rb
test_forwardable.rb merge revision(s) 53383,55366: [Backport #12478] 2017-03-25 14:43:16 +00:00
test_ipaddr.rb merge revision(s) 52244: [Backport #11513] 2015-11-24 15:49:21 +00:00
test_mathn.rb * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
test_mutex_m.rb
test_open3.rb * test/test_open3.rb: Add a simple test for env hash on popen3. 2014-12-02 22:08:05 +00:00
test_pp.rb * test/test_pp.rb (PPTestModule::PPFileStatTest): test for r48719. 2014-12-05 19:48:15 +00:00
test_prettyprint.rb
test_prime.rb
test_pstore.rb * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
test_pty.rb * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
test_rbconfig.rb
test_securerandom.rb
test_set.rb * lib/set.rb (Set#replace): Check if an object given is enumerable 2014-08-06 11:28:21 +00:00
test_shellwords.rb
test_singleton.rb
test_syslog.rb test/test_syslog.rb (TestSyslog#test_log): In AIX, each output line of LOG_PERROR to stderr has an additional empty line appended, so skip that line. 2014-10-04 07:35:43 +00:00
test_tempfile.rb merge revision(s) 62990: 2018-03-28 14:34:14 +00:00
test_time.rb merge revision(s) 49788,49790: [Backport #10904] 2015-08-03 19:11:41 +00:00
test_timeout.rb merge revision(s) 51213: [Backport #11344] 2015-08-10 17:08:37 +00:00
test_tmpdir.rb merge revision(s) 62990: 2018-03-28 14:34:14 +00:00
test_tracer.rb * test/lib/envutil.rb: Moved from test/ruby/. 2014-11-13 16:05:37 +00:00
test_tsort.rb * lib/tsort.rb: Returns an enumerator if no block is given. 2014-11-26 10:46:50 +00:00
test_unicode_normalize.rb test_unicode_normalize.rb: skip only once 2014-11-11 23:54:45 +00:00
test_weakref.rb test/test_weakref.rb: increase timeout [Bug #10618] 2014-12-19 20:20:33 +00:00
test_win32api.rb merge revision(s) 49750: [Backport #10876] 2015-02-26 08:23:50 +00:00