[#110736] Can't sign in to bugs.ruby-lang.org — Daniel Berger <djberg96@...>
Hi,
4 messages
2022/11/13
[ruby-core:110576] [Ruby master Feature#19090] Do not duplicate an unescaped string in CGI.escapeHTML
From:
"k0kubun (Takashi Kokubun)" <noreply@...>
Date:
2022-11-02 04:45:28 UTC
List:
ruby-core #110576
SXNzdWUgIzE5MDkwIGhhcyBiZWVuIHVwZGF0ZWQgYnkgazBrdWJ1biAoVGFrYXNoaSBLb2t1YnVu KS4KCgo+IElzbid0IHJiX3N0cl9kdXAgY29weS1vbi13cml0ZSBhbmQgc28gc2hvdWxkIGJlIGZh aXJseSBjaGVhcD8KCkFzIEkgd3JvdGUgaW4gdGhlIGRlc2NyaXB0aW9uLCBjYWxsaW5nIGByYl9z dHJfZHVwYCBpcyBtYWtpbmcgdGhlIHdob2xlIG1ldGhvZCAxLjM0eCBzbG93ZXIgbm8gbWF0dGVy IGhvdyBlZmZpY2llbnQgQ29XIGlzLiBXaGV0aGVyIHRoZSAzNCUgc2xvd2Rvd24gaXMgY2hlYXAg b3Igbm90IGRlcGVuZHMgb24gaG93IG9mdGVuIHRoZSBtZXRob2QgaXMgdXNlZCBhbmQgaGl0cyB0 aGUgbm9uLWVzY2FwZWQgY2FzZS4gV2hhdCBJJ20gc2F5aW5nIGlzIHRoYXQgdGhpcyBtZXRob2Qg aXMgdXNlZCBmb3IgYWxtb3N0IGFsbCBlbWJlZGRlZCBleHByZXNzaW9ucyBpbiB0ZW1wbGF0ZXMg YW5kIGl0IGhpdHMgdGhlIG5vbi1lc2NhcGVkIGNhc2UgbW9zdCBvZiB0aGUgdGltZS4gTGV0J3Mg c2F5IHlvdSBoYXZlIGEgcGFnZSB0aGF0IGxpc3RzIDEwMCByZXNvdXJjZXMgd2l0aCA1IGZpZWxk cywgaXQgd291bGQgY2FsbCBgQ0dJLmVzY2FwZUhUTUxgIGF0IGxlYXN0IDUwMCB0aW1lcyBhbmQg bWFueSBvZiB0aGVtIGNvdWxkIGhhdmUgbm8gYCciJjw+YCBjaGFyYWN0ZXJzLgoKR2VuZXJhbGx5 LCBlc2NhcGluZyBhbiBIVE1MIGlzIGtub3duIHRvIGJlIG9uZSBvZiB0aGUgbGFyZ2VzdCBib3R0 bGVuZWNrcyBpbiB0ZW1wbGF0ZSBlbmdpbmUgYmVuY2htYXJrcyB0aGF0IGVuYWJsZSBIVE1MIGVz Y2FwaW5nLCB3aGljaCBpcyB3aHkgSSd2ZSBsaXRlcmFsbHkgc3BlbnQgeWVhcnMgb3B0aW1pemlu ZyB0aGlzIG1ldGhvZC4gSSB3b3VsZCBuZXZlciBzYXkgYSAzNCUgc2xvd2Rvd24gaW4gYENHSS5l c2NhcGVIVE1MYCBpcyBjaGVhcC4gSWYgeW91IG1vZGlmeSB0aGUgYmVuY2htYXJrIGNyZWF0ZWQg YnkgdGhlIFNsaW0gdGVhbSB0byBlc2NhcGUgZW1iZWRkZWQgZXhwcmVzc2lvbnMsIHRoZSBiZW5j aG1hcmsgYmVjb21lcyAxLjF4IGZhc3RlciBieSBqdXN0IHJlbW92aW5nIHRoaXMgYHJiX3N0cl9k dXBgIGNhbGwuIFNvIHRoZSAzNCUgc2xvd2Rvd24gaW4gdGhlIG1pY3JvYmVuY2htYXJrIG9mIHRo aXMgbWV0aG9kIHRyYW5zbGF0ZXMgdG8gYSAxMCUgc2xvd2Rvd24gaW4gdGhlIHRlbXBsYXRlIHJl bmRlcmluZy4KCj4gQSBuZXcgbWV0aG9kIGxpa2UgQ0dJLmVzY2FwZUhUTUwhIHdvdWxkIG1ha2Ug c2Vuc2UgdG8gbWUsIGFzIGl0IGluZGljYXRlcyB0aGUgZGFuZ2VyIG9mIG11dGF0aW5nIHRoZSBy ZXR1cm4gdmFsdWUuCgpJdCdzIG5vdCBkb2luZyBhbnkgbXV0YXRpb24gYnkgaXRzZWxmLCBhbmQg SSBkb24ndCBrbm93IG9mIGFueSBleGlzdGluZyBtZXRob2QgbmFtZWQgbGlrZSB0aGF0LiBUaHVz IE1hdHogd291bGQgbm90IGxpa2UgdGhlIG5hbWUsIGFuZCBJJ20gbm90IHN1cmUgaWYgdGhlIGxp YnJhcnkgbWFpbnRhaW5lciAoQG5vYnUpIGxpa2VzIGl0IGVpdGhlci4gQnV0IHRoYW5rcyBmb3Ig cHJvcG9zaW5nIGFuIGFsdGVybmF0aXZlIG5hbWUuCgotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tCkZlYXR1cmUgIzE5MDkwOiBEbyBub3QgZHVwbGljYXRlIGFuIHVuZXNj YXBlZCBzdHJpbmcgaW4gQ0dJLmVzY2FwZUhUTUwKaHR0cHM6Ly9idWdzLnJ1YnktbGFuZy5vcmcv aXNzdWVzLzE5MDkwI2NoYW5nZS05OTkxMAoKKiBBdXRob3I6IGswa3VidW4gKFRha2FzaGkgS29r dWJ1bikKKiBTdGF0dXM6IE9wZW4KKiBQcmlvcml0eTogTm9ybWFsCi0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KIyMgUHJvcG9zYWwKU3RvcCBndWFyYW50ZWVpbmcgdGhh dCBgR0dJLmVzY2FwZUhUTUxgIHJldHVybnMgYSBuZXcgc3RyaW5nIGV2ZW4gaWYgdGhlcmUncyBu b3RoaW5nIHRvIGJlIGVzY2FwZWQuCgpNb3JlIHNwZWNpZmljYWxseSwgc3RvcCBjYWxsaW5nIHRo aXMgYHJiX3N0cl9kdXBgIGh0dHBzOi8vZ2l0aHViLmNvbS9ydWJ5L2NnaS9ibG9iL3YwLjMuMy9l eHQvY2dpL2VzY2FwZS9lc2NhcGUuYyNMNzIgZm9yIHRoZSBjYXNlIHRoYXQgbm90aGluZyBuZWVk cyB0byBiZSBlc2NhcGVkLgoKIyMgQmFja2dyb3VuZApNeSBvcmlnaW5hbCBpbXBsZW1lbnRhdGlv biBodHRwczovL2dpdGh1Yi5jb20vcnVieS9ydWJ5L3B1bGwvMTE2NCB3YXMgbm90IGNhbGxpbmcg aXQuIFRoZSByZWFzb24gd2h5IGByYl9zdHJfZHVwYCB3YXMgYWRkZWQgd2FzIHRoYXQgW0J1ZyAj MTE4NThdIGNsYWltZWQgcmV0dXJuaW5nIHRoZSBhcmd1bWVudCBvYmplY3QgZm9yIG5vbi1lc2Nh cGVkIGNhc2VzIGlzIGEgYmFja3dhcmQgaW5jb21wYXRpYmlsaXR5IGJlY2F1c2UgdGhlIG9yaWdp bmFsIGBnc3ViYC1iYXNlZCBpbXBsZW1lbnRhdGlvbiBhbHdheXMgcmV0dXJucyBhIG5ldyBvYmpl Y3QuIEFzIGEgcmVzdWx0LCBldmVuIHdoaWxlIG1hbnkgcGVvcGxlIHVzZSBgQ0dJLmVzY2FwZUhU TUxgIGFzIGFuIG9wdGltaXplZCBpbXBsZW1lbnRhdGlvbiBmb3IgZXNjYXBpbmcgSFRNTCB0b2Rh eSwgaXQgZW5kZWQgdXAgaGF2aW5nIGEgY29tcHJvbWlzZWQgcGVyZm9ybWFuY2UuCgojIyBNb3Rp dmF0aW9uClRoZSBtb3RpdmF0aW9uIGlzIHRvIGltcHJvdmUgcGVyZm9ybWFuY2UuIEJ5IGp1c3Qg ZG9pbmcgc28sIGVzY2FwaW5nIGEgcHJlLWFsbG9jYXRlZCBgInN0cmluZyJgIGJlY29tZXMgMS4z NHggZmFzdGVyIG9uIG15IG1hY2hpbmUgaHR0cHM6Ly9naXN0LmdpdGh1Yi5jb20vazBrdWJ1bi9m NjZkNmZlMWU2YmE4MjFlNDI2MzI1N2U1MDRiYTI4Zi4KClRoZSBtb3N0IG1ham9yIHVzZSBjYXNl IG9mIGBDR1AuZXNjYXBlSFRNTGAgaXMgdG8gc2FmZWx5IGVtYmVkIGEgdXNlciBpbnB1dC4gV2hl biB0aGUgcmVzdWx0IGlzIGp1c3QgZW1iZWRkZWQgaW4gYW5vdGhlciBzdHJpbmcsIHRoZSBhbGxv Y2F0ZWQgbmV3IG9iamVjdCB3aWxsIGJlIGp1c3Qgd2FzdGVkLiBJdCdzIHByZXR0eSBjb21tb24g dGhhdCBhbiBlbWJlZGRlZCBzdHJpbmcgZnJhZ21lbnQgZG9lc24ndCBjb250YWluIGFueSBvZiBg JyImPD5gIGNoYXJhY3RlcnMuIFNvIHdlIHNob3VsZCBzdG9wIHdhc3RpbmcgdGhhdCB0byBvcHRp bWl6ZSB0aGF0IGNhc2UuCgpbQnVnICMxMTg1OF0gd2Fzbid0IHJlYWxseSBhIHVzZSBjYXNlIGJ1 dCBqdXN0ICJJIHRoaW5rIHRoaXMgaXMgYmFja3dhcmQgaW5jb21wYXRpYmlsaXR5IiBiYXNlZCBv biBmcm96ZW4gSGVsbG8gV29ybGQuIFVubGlrZSB1c2VyIGlucHV0LCB5b3UgdXN1YWxseSBkb24n dCBuZWVkIHRvIGVzY2FwZSB5b3VyIG93biBzdHJpbmcgbGl0ZXJhbC4gSXQgZmVlbHMgbGlrZSB0 aGUgdGlja2V0IGFkZHJlc3NlZCBhIHByb2JsZW0gdGhhdCBkb2Vzbid0IGV4aXN0IGluIGFjdHVh bCBhcHBsaWNhdGlvbnMuIEl0IHNob3VsZCBoYXZlIGNpdGVkIGV4aXN0aW5nIGNvZGUgdGhhdCBj b3VsZCBiZSBicm9rZW4gYnkgdGhhdCwgYW5kIEkgY2FuJ3QgZmluZCBzdWNoIGNvZGUgd2l0aCBg Z2VtLWNvZGVzZWFyY2hgIHRvZGF5LgoKVGhlIG9ubHkgcmVhc29uIHRvIG1haW50YWluIHRoZSBj dXJyZW50IGJlaGF2aW9yIHdvdWxkIGJlIHRvIGFsbG93IHVzaW5nIGEgcmV0dXJuIHZhbHVlIG9m IGBDR0kuZXNjYXBlSFRNTGAgYXMgYSBidWZmZXIgZm9yIGNyZWF0aW5nIGFub3RoZXIgbG9uZ2Vy IHN0cmluZyBzdGFydGluZyB3aXRoIHRoZSBlc2NhcGVkIHZhbHVlLCBidXQgdXNpbmcgYENHSS5l c2NhcGVIVE1MYCB0byBpbml0aWFsaXplIGEgc3RyaW5nIGJ1ZmZlciBmZWVscyBsaWtlIGFuIGFi dXNlLiBSZWx5aW5nIG9uIHRoZSBiZWhhdmlvciBuZXZlciBtYWtlcyBzZW5zZSBhcyBhbiAib3B0 aW1pemF0aW9uIiBlaXRoZXIgYmVjYXVzZSBpdCBtYWtlcyBhbGwgb3RoZXIgY2FzZXMgKHRoZSBy ZXN1bHQgaXMgbm90IHVzZWQgYXMgYSBzdHJpbmcgYnVmZmVyKSBzdWJvcHRpbWFsLgoKIyMgV2h5 IG5vdCBhbiBvcHRpb25hbCBmbGFnIGxpa2UgYENHSS5lc2NhcGVIVE1MKHN0ciwgZHVwOiBmYWxz ZSlgPwpUd28gcmVhc29uczoKCiogVGhlIG5vbi1kdXAgYmVoYXZpb3Igc2hvdWxkIGJlIHVzZWQg OTkuOTk5Li45JSBvZiB0aGUgdGltZS4gV2Ugc2hvdWxkbid0IG1ha2UgY29kZSB1c2luZyBgQ0dJ LmVzY2FwZUhUTUxgIGxlc3MgcmVhZGFibGUganVzdCBmb3IgbWFpbnRhaW5pbmcgYSB1c2UgY2Fz ZSB0aGF0IGRvZXNuJ3QgZXhpc3QuCiogUGFzc2luZyBrZXl3b3JkIGFyZ3VtZW50cyB0byBhIEMg ZXh0ZW5zaW9uIGlzIHVuZm9ydHVuYXRlbHkgc2xvdywgYW5kIGl0IGRlZmVhdHMgdGhlIG9wdGlt aXphdGlvbiBwdXJwb3NlLiBJbiBjb3JlIGNsYXNzZXMsIHdlIGNvdWxkIHVzZSBgUHJpbWl0aXZl YCB0byBhZGRyZXNzIHRoYXQsIGJ1dCB0aGlzIGlzIGEgZGVmYXVsdCBnZW0gYW5kIHdlIGNhbid0 IHVzZSB0aGF0LgogICogV2UgY291bGQgd29ya2Fyb3VuZCB0aGF0IGlmIHdlIGNob29zZSBgQ0dJ LmVzY2FwZUhUTUwoc3RyLCBmYWxzZSlgLCBidXQgYWdhaW4gaXQnZCBzcG9pbCB0aGUgcmVhZGFi aWxpdHkgZm9yIG1haW50YWluaW5nIGFuIGludmFsaWQgdXNlIGNhc2UuCgojIyBXaHkgbm90IGEg bmV3IG1ldGhvZD8KCkl0J3MgYSBnb29kIGlkZWEgYWN0dWFsbHksIGJ1dCB3aXRoIGBlc2NhcGVI VE1MYCwgYGVzY2FwZV9odG1sYCwgYW5kIGBoYCBhbGlhc2VkIHRvIGl0IGFscmVhZHksIEkgY2Fu J3QgdGhpbmsgb2YgYSBnb29kIG5hbWUgZm9yIGl0LiBBbmQgYWdhaW4sIG5vdCBjYWxsaW5nIGl0 IGBlc2NhcGVIVE1MYCBvciBgZXNjYXBlX2h0bWxgIHdvdWxkIHNwb2lsIHRoZSByZWFkYWJpbGl0 eSBmb3Igbm8gdmFsaWQgcmVhc29uLgoKCgotLSAKaHR0cHM6Ly9idWdzLnJ1YnktbGFuZy5vcmcv CgpVbnN1YnNjcmliZTogPG1haWx0bzpydWJ5LWNvcmUtcmVxdWVzdEBydWJ5LWxhbmcub3JnP3N1 YmplY3Q9dW5zdWJzY3JpYmU+CjxodHRwOi8vbGlzdHMucnVieS1sYW5nLm9yZy9jZ2ktYmluL21h aWxtYW4vb3B0aW9ucy9ydWJ5LWNvcmU+Cg==