Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | * lib/webrick/httpproxy.rb (WEBrick::HTTPProxyServer#do_CONNECT): | matz | 2008-11-08 | 1 | -1/+1 |
| | | | | | | | | | | | | use #bytesize instead of #size. a patch submitted from raspberry lemon in [ruby-core:18571]. * lib/webrick/httpauth/digestauth.rb, lib/webrick/httpproxy.rb, lib/webrick/httprequest.rb, lib/webrick/httpservlet/cgi_runner.rb, lib/webrick/httpservlet/abstract.rb, lib/webrick/httpresponse.rb, lib/webrick/httpservlet/cgihandler.rb, lib/webrick/utils.rb: ditto. git-svn-id: http://svn.ruby-lang.org/repos/ruby/trunk@20152 b2dd03c8-39d4-4d8f-98ff-823fe69b080e | ||||
* | * lib/webrick/httpservlet/filehandler.rb: should normalize path | gotoyuzo | 2008-05-18 | 1 | -1/+3 |
| | | | | | | | | | | | | | | | | | | name in path_info to prevent script disclosure vulnerability on DOSISH filesystems. (fix: CVE-2008-1891) Note: NTFS/FAT filesystem should not be published by the platforms other than Windows. Pathname interpretation (including short filename) is less than perfect. * lib/webrick/httpservlet/abstract.rb (WEBrick::HTTPServlet::AbstracServlet#redirect_to_directory_uri): should escape the value of Location: header. * lib/webrick/httpservlet/cgi_runner.rb: accept interpreter command line arguments. git-svn-id: http://svn.ruby-lang.org/repos/ruby/trunk@16453 b2dd03c8-39d4-4d8f-98ff-823fe69b080e | ||||
* | * lib/webrick: imported. | gotoyuzo | 2003-07-23 | 1 | -0/+45 |
git-svn-id: http://svn.ruby-lang.org/repos/ruby/trunk@4130 b2dd03c8-39d4-4d8f-98ff-823fe69b080e |