mirror of
				https://github.com/ruby/ruby.git
				synced 2022-11-09 12:17:21 -05:00 
			
		
		
		
	git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@67361 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
		
			
				
	
	
		
			23 lines
		
	
	
	
		
			690 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			23 lines
		
	
	
	
		
			690 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
require_relative '../spec_helper'
 | 
						|
 | 
						|
require 'yaml'
 | 
						|
require 'rubygems'
 | 
						|
require 'rubygems/safe_yaml'
 | 
						|
require 'rubygems/commands/owner_command'
 | 
						|
 | 
						|
ruby_version_is "2.5.5" do
 | 
						|
  describe "CVE-2019-8322 is resisted by" do
 | 
						|
    it "sanitising owner names" do
 | 
						|
      command = Gem::Commands::OwnerCommand.new
 | 
						|
      def command.rubygems_api_request(*args)
 | 
						|
        Struct.new(:body).new("---\n- email: \"\e]2;nyan\a\"\n  handle: handle\n  id: id\n")
 | 
						|
      end
 | 
						|
      def command.with_response(response)
 | 
						|
        yield response
 | 
						|
      end
 | 
						|
      command.should_receive(:say).with("Owners for gem: name")
 | 
						|
      command.should_receive(:say).with("- .]2;nyan.")
 | 
						|
      command.show_owners "name"
 | 
						|
    end
 | 
						|
  end
 | 
						|
end
 |