[MacRuby-devel] [MacRuby] #522: URI.parse insecure operation

26 Dec 2009


      #522: URI.parse  insecure operation
-------------------------------------+--------------------------------------
 Reporter:  mattaimonetti@…          |       Owner:  lsansonetti@…        
     Type:  defect                   |      Status:  new                  
 Priority:  major                    |   Milestone:  MacRuby 0.5          
Component:  MacRuby                  |    Keywords:                       
-------------------------------------+--------------------------------------
 {{{
 $ macirb
...
...
require 'uri'
 => true
url = URI.parse('http://mobile.lemonde.fr/culture/article/2009/12/14
 /johnny-halliday-est-sorti-du-coma-
 artificiel_1280634_3246.html#xtor=RSS-3208')
 => #<URI::HTTP:0x2000d05c0
 URL:http://mobile.lemonde.fr/culture/article/2009/12/14/johnny-halliday-
 est-sorti-du-coma-artificiel_1280634_3246.html#xtor=RSS-3208>
url.path
 core:in `push:': Insecure operation: -r (SecurityError)
         from core:in `gets'
 }}}
{{{
 $ irb1.9
...
...
require 'uri'
 => true
url = URI.parse('http://mobile.lemonde.fr/culture/article/2009/12/14
 /johnny-halliday-est-sorti-du-coma-
 artificiel_1280634_3246.html#xtor=RSS-3208')
 => #<URI::HTTP:0x00000100861fe0
 URL:http://mobile.lemonde.fr/culture/article/2009/12/14/johnny-halliday-
 est-sorti-du-coma-artificiel_1280634_3246.html#xtor=RSS-3208>
url.path
 => "/culture/article/2009/12/14/johnny-halliday-est-sorti-du-coma-
 artificiel_1280634_3246.html"
}}}

-- 
Ticket URL: <http://www.macruby.org/trac/ticket/522>
MacRuby <http://macruby.org/>