gotoyuzo 10a0d4b61d * lib/webrick/httpservlet/filehandler.rb: should normalize path ... separators in path_info to prevent directory traversal attacks on DOSISH platforms. reported by Digital Security Research Group [DSECRG-08-026]. * lib/webrick/httpservlet/filehandler.rb: pathnames which have not to be published should be checked case-insensitively. git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@15676 b2dd03c8-39d4-4d8f-98ff-823fe69b080e		2008-03-03 14:31:30 +00:00
..
httpauth	* lib/webrick/httpauth/authenticator.rb	2007-07-04 14:51:22 +00:00
httpservlet	* lib/webrick/httpservlet/filehandler.rb: should normalize path	2008-03-03 14:31:30 +00:00
accesslog.rb	* lib/webrick/server.rb (WEBrick::GenericServer#start_thread):	2004-12-15 08:47:49 +00:00
cgi.rb	* lib/webrick/httprequest.rb, lib/webrick/cgi.rb: Request-Line or	2007-12-17 07:03:57 +00:00
compat.rb
config.rb	* lib/webrick/server.rb (WEBrick::GenericServer#accept_client):	2007-12-18 14:43:03 +00:00
cookie.rb	* lib/webrick/cookie.rb (WEBrick::Cookie.parse_set_cookies): new	2006-09-08 01:04:52 +00:00
htmlutils.rb
httpauth.rb	* lib/webrick/httpauth/htpasswd.rb (WEBrick::Htpasswd#reload):	2005-01-02 22:31:13 +00:00
httpproxy.rb	* lib/webrick/httpproxy.rb (WEBrick::HTTPProxyServer#proxy_service):	2007-12-31 14:17:41 +00:00
httprequest.rb	* lib/webrick/httprequest.rb: supprt X-Forwarded-* header fields.	2008-01-09 11:37:03 +00:00
httpresponse.rb	* ext/json/lib/json/pure/generator.rb,	2008-02-12 06:18:06 +00:00
https.rb
httpserver.rb	* lib/webrick/httpserver.rb (WEBrick::HTTPServer::unmount): remove	2006-07-18 05:08:37 +00:00
httpservlet.rb
httpstatus.rb	* parse.y (assoc_list): remove expanded hash literal (no splat).	2007-06-29 06:27:49 +00:00
httputils.rb	* lib/webrick/httputils.rb (WEBrick::HTTPUtils::FormData::<<):	2006-12-01 22:38:47 +00:00
httpversion.rb
log.rb
server.rb	* lib/webrick/server.rb (WEBrick::HTTPServer#start):	2008-01-09 04:46:55 +00:00
ssl.rb	* lib/webrick/cgi.rb (WEBrick::CGI::Socket#request_line): should	2005-01-10 06:29:58 +00:00
utils.rb	* lib/webrick/utils.rb (WEBrick::Utils::TimeoutHandler#initialize):	2007-01-04 08:32:37 +00:00
version.rb