[MacRuby-devel] [MacRuby] #522: URI.parse insecure operation

MacRuby ruby-noreply at macosforge.org
Fri Dec 25 23:06:09 PST 2009


#522: URI.parse  insecure operation
-------------------------------------+--------------------------------------
 Reporter:  mattaimonetti@…          |       Owner:  lsansonetti@…        
     Type:  defect                   |      Status:  new                  
 Priority:  major                    |   Milestone:  MacRuby 0.5          
Component:  MacRuby                  |    Keywords:                       
-------------------------------------+--------------------------------------
 {{{
 $ macirb
 >> require 'uri'
 => true
 >> url = URI.parse('http://mobile.lemonde.fr/culture/article/2009/12/14
 /johnny-halliday-est-sorti-du-coma-
 artificiel_1280634_3246.html#xtor=RSS-3208')
 => #<URI::HTTP:0x2000d05c0
 URL:http://mobile.lemonde.fr/culture/article/2009/12/14/johnny-halliday-
 est-sorti-du-coma-artificiel_1280634_3246.html#xtor=RSS-3208>
 >> url.path
 core:in `push:': Insecure operation: -r (SecurityError)
         from core:in `gets'
 }}}


 {{{
 $ irb1.9
 >> require 'uri'
 => true
 >> url = URI.parse('http://mobile.lemonde.fr/culture/article/2009/12/14
 /johnny-halliday-est-sorti-du-coma-
 artificiel_1280634_3246.html#xtor=RSS-3208')
 => #<URI::HTTP:0x00000100861fe0
 URL:http://mobile.lemonde.fr/culture/article/2009/12/14/johnny-halliday-
 est-sorti-du-coma-artificiel_1280634_3246.html#xtor=RSS-3208>
 >> url.path
 => "/culture/article/2009/12/14/johnny-halliday-est-sorti-du-coma-
 artificiel_1280634_3246.html"
 >>

 }}}

-- 
Ticket URL: <http://www.macruby.org/trac/ticket/522>
MacRuby <http://macruby.org/>



More information about the MacRuby-devel mailing list