[#110736] Can't sign in to bugs.ruby-lang.org — Daniel Berger <djberg96@...>
Hi,
4 messages
2022/11/13
[ruby-core:110583] [Ruby master Feature#19090] Do not duplicate an unescaped string in CGI.escapeHTML
From:
"Dan0042 (Daniel DeLorme)" <noreply@...>
Date:
2022-11-02 15:02:27 UTC
List:
ruby-core #110583
SXNzdWUgIzE5MDkwIGhhcyBiZWVuIHVwZGF0ZWQgYnkgRGFuMDA0MiAoRGFuaWVsIERlTG9ybWUp LgoKCkFjdHVhbGx5IGFuIGV2ZW4gYmV0dGVyIGFwcHJvYWNoIG1heSBiZSB0byBhcHBlbmQgdGhl IGVzY2FwZWQgYnl0ZXMgZGlyZWN0bHkgdG8gdGhlIGZpbmFsIG91dHB1dCBidWZmZXIsIGluc3Rl YWQgb2YgZ2VuZXJhdGluZyBhbnkgaW50ZXJtZWRpYXJ5IHN0cmluZyBhdCBhbGwuIEFzIHN1Y2gg SSB3b3VsZCBsaWtlIHRvIHByb3Bvc2U6CmBDR0kuZXNjYXBlSFRNTChzdHIsICIiKWAgYXBwZW5k IHRvIG5ldyBzdHJpbmcgKGN1cnJlbnQgYmVoYXZpb3IpCmBDR0kuZXNjYXBlSFRNTChzdHIsIG5p bClgIGFwcGVuZCB0byBuZXcgc3RyaW5nIG9yIHJldHVybiB1bm1vZGlmaWVkIGBzdHJgIChuZXcg ZGVmYXVsdD8pCmBDR0kuZXNjYXBlSFRNTChzdHIsIGJ1ZmZlcilgIGFwcGVuZCB0byBidWZmZXIg KG1vc3QgZWZmaWNpZW50IHdoZW4gcmVuZGVyaW5nIG11dGxpcGxlIHN0cmluZyBpbiB0ZW1wbGF0 ZSkKCgotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCkZlYXR1cmUgIzE5 MDkwOiBEbyBub3QgZHVwbGljYXRlIGFuIHVuZXNjYXBlZCBzdHJpbmcgaW4gQ0dJLmVzY2FwZUhU TUwKaHR0cHM6Ly9idWdzLnJ1YnktbGFuZy5vcmcvaXNzdWVzLzE5MDkwI2NoYW5nZS05OTkxNgoK KiBBdXRob3I6IGswa3VidW4gKFRha2FzaGkgS29rdWJ1bikKKiBTdGF0dXM6IE9wZW4KKiBQcmlv cml0eTogTm9ybWFsCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KIyMg UHJvcG9zYWwKU3RvcCBndWFyYW50ZWVpbmcgdGhhdCBgR0dJLmVzY2FwZUhUTUxgIHJldHVybnMg YSBuZXcgc3RyaW5nIGV2ZW4gaWYgdGhlcmUncyBub3RoaW5nIHRvIGJlIGVzY2FwZWQuCgpNb3Jl IHNwZWNpZmljYWxseSwgc3RvcCBjYWxsaW5nIHRoaXMgYHJiX3N0cl9kdXBgIGh0dHBzOi8vZ2l0 aHViLmNvbS9ydWJ5L2NnaS9ibG9iL3YwLjMuMy9leHQvY2dpL2VzY2FwZS9lc2NhcGUuYyNMNzIg Zm9yIHRoZSBjYXNlIHRoYXQgbm90aGluZyBuZWVkcyB0byBiZSBlc2NhcGVkLgoKIyMgQmFja2dy b3VuZApNeSBvcmlnaW5hbCBpbXBsZW1lbnRhdGlvbiBodHRwczovL2dpdGh1Yi5jb20vcnVieS9y dWJ5L3B1bGwvMTE2NCB3YXMgbm90IGNhbGxpbmcgaXQuIFRoZSByZWFzb24gd2h5IGByYl9zdHJf ZHVwYCB3YXMgYWRkZWQgd2FzIHRoYXQgW0J1ZyAjMTE4NThdIGNsYWltZWQgcmV0dXJuaW5nIHRo ZSBhcmd1bWVudCBvYmplY3QgZm9yIG5vbi1lc2NhcGVkIGNhc2VzIGlzIGEgYmFja3dhcmQgaW5j b21wYXRpYmlsaXR5IGJlY2F1c2UgdGhlIG9yaWdpbmFsIGBnc3ViYC1iYXNlZCBpbXBsZW1lbnRh dGlvbiBhbHdheXMgcmV0dXJucyBhIG5ldyBvYmplY3QuIEFzIGEgcmVzdWx0LCBldmVuIHdoaWxl IG1hbnkgcGVvcGxlIHVzZSBgQ0dJLmVzY2FwZUhUTUxgIGFzIGFuIG9wdGltaXplZCBpbXBsZW1l bnRhdGlvbiBmb3IgZXNjYXBpbmcgSFRNTCB0b2RheSwgaXQgZW5kZWQgdXAgaGF2aW5nIGEgY29t cHJvbWlzZWQgcGVyZm9ybWFuY2UuCgojIyBNb3RpdmF0aW9uClRoZSBtb3RpdmF0aW9uIGlzIHRv IGltcHJvdmUgcGVyZm9ybWFuY2UuIEJ5IGp1c3QgZG9pbmcgc28sIGVzY2FwaW5nIGEgcHJlLWFs bG9jYXRlZCBgInN0cmluZyJgIGJlY29tZXMgMS4zNHggZmFzdGVyIG9uIG15IG1hY2hpbmUgaHR0 cHM6Ly9naXN0LmdpdGh1Yi5jb20vazBrdWJ1bi9mNjZkNmZlMWU2YmE4MjFlNDI2MzI1N2U1MDRi YTI4Zi4KClRoZSBtb3N0IG1ham9yIHVzZSBjYXNlIG9mIGBDR1AuZXNjYXBlSFRNTGAgaXMgdG8g c2FmZWx5IGVtYmVkIGEgdXNlciBpbnB1dC4gV2hlbiB0aGUgcmVzdWx0IGlzIGp1c3QgZW1iZWRk ZWQgaW4gYW5vdGhlciBzdHJpbmcsIHRoZSBhbGxvY2F0ZWQgbmV3IG9iamVjdCB3aWxsIGJlIGp1 c3Qgd2FzdGVkLiBJdCdzIHByZXR0eSBjb21tb24gdGhhdCBhbiBlbWJlZGRlZCBzdHJpbmcgZnJh Z21lbnQgZG9lc24ndCBjb250YWluIGFueSBvZiBgJyImPD5gIGNoYXJhY3RlcnMuIFNvIHdlIHNo b3VsZCBzdG9wIHdhc3RpbmcgdGhhdCB0byBvcHRpbWl6ZSB0aGF0IGNhc2UuCgpbQnVnICMxMTg1 OF0gd2Fzbid0IHJlYWxseSBhIHVzZSBjYXNlIGJ1dCBqdXN0ICJJIHRoaW5rIHRoaXMgaXMgYmFj a3dhcmQgaW5jb21wYXRpYmlsaXR5IiBiYXNlZCBvbiBmcm96ZW4gSGVsbG8gV29ybGQuIFVubGlr ZSB1c2VyIGlucHV0LCB5b3UgdXN1YWxseSBkb24ndCBuZWVkIHRvIGVzY2FwZSB5b3VyIG93biBz dHJpbmcgbGl0ZXJhbC4gSXQgZmVlbHMgbGlrZSB0aGUgdGlja2V0IGFkZHJlc3NlZCBhIHByb2Js ZW0gdGhhdCBkb2Vzbid0IGV4aXN0IGluIGFjdHVhbCBhcHBsaWNhdGlvbnMuIEl0IHNob3VsZCBo YXZlIGNpdGVkIGV4aXN0aW5nIGNvZGUgdGhhdCBjb3VsZCBiZSBicm9rZW4gYnkgdGhhdCwgYW5k IEkgY2FuJ3QgZmluZCBzdWNoIGNvZGUgd2l0aCBgZ2VtLWNvZGVzZWFyY2hgIHRvZGF5LgoKVGhl IG9ubHkgcmVhc29uIHRvIG1haW50YWluIHRoZSBjdXJyZW50IGJlaGF2aW9yIHdvdWxkIGJlIHRv IGFsbG93IHVzaW5nIGEgcmV0dXJuIHZhbHVlIG9mIGBDR0kuZXNjYXBlSFRNTGAgYXMgYSBidWZm ZXIgZm9yIGNyZWF0aW5nIGFub3RoZXIgbG9uZ2VyIHN0cmluZyBzdGFydGluZyB3aXRoIHRoZSBl c2NhcGVkIHZhbHVlLCBidXQgdXNpbmcgYENHSS5lc2NhcGVIVE1MYCB0byBpbml0aWFsaXplIGEg c3RyaW5nIGJ1ZmZlciBmZWVscyBsaWtlIGFuIGFidXNlLiBSZWx5aW5nIG9uIHRoZSBiZWhhdmlv ciBuZXZlciBtYWtlcyBzZW5zZSBhcyBhbiAib3B0aW1pemF0aW9uIiBlaXRoZXIgYmVjYXVzZSBp dCBtYWtlcyBhbGwgb3RoZXIgY2FzZXMgKHRoZSByZXN1bHQgaXMgbm90IHVzZWQgYXMgYSBzdHJp bmcgYnVmZmVyKSBzdWJvcHRpbWFsLgoKIyMgV2h5IG5vdCBhbiBvcHRpb25hbCBmbGFnIGxpa2Ug YENHSS5lc2NhcGVIVE1MKHN0ciwgZHVwOiBmYWxzZSlgPwpUd28gcmVhc29uczoKCiogVGhlIG5v bi1kdXAgYmVoYXZpb3Igc2hvdWxkIGJlIHVzZWQgOTkuOTk5Li45JSBvZiB0aGUgdGltZS4gV2Ug c2hvdWxkbid0IG1ha2UgY29kZSB1c2luZyBgQ0dJLmVzY2FwZUhUTUxgIGxlc3MgcmVhZGFibGUg anVzdCBmb3IgbWFpbnRhaW5pbmcgYSB1c2UgY2FzZSB0aGF0IGRvZXNuJ3QgZXhpc3QuCiogUGFz c2luZyBrZXl3b3JkIGFyZ3VtZW50cyB0byBhIEMgZXh0ZW5zaW9uIGlzIHVuZm9ydHVuYXRlbHkg c2xvdywgYW5kIGl0IGRlZmVhdHMgdGhlIG9wdGltaXphdGlvbiBwdXJwb3NlLiBJbiBjb3JlIGNs YXNzZXMsIHdlIGNvdWxkIHVzZSBgUHJpbWl0aXZlYCB0byBhZGRyZXNzIHRoYXQsIGJ1dCB0aGlz IGlzIGEgZGVmYXVsdCBnZW0gYW5kIHdlIGNhbid0IHVzZSB0aGF0LgogICogV2UgY291bGQgd29y a2Fyb3VuZCB0aGF0IGlmIHdlIGNob29zZSBgQ0dJLmVzY2FwZUhUTUwoc3RyLCBmYWxzZSlgLCBi dXQgYWdhaW4gaXQnZCBzcG9pbCB0aGUgcmVhZGFiaWxpdHkgZm9yIG1haW50YWluaW5nIGFuIGlu dmFsaWQgdXNlIGNhc2UuCgojIyBXaHkgbm90IGEgbmV3IG1ldGhvZD8KCkl0J3MgYSBnb29kIGlk ZWEgYWN0dWFsbHksIGJ1dCB3aXRoIGBlc2NhcGVIVE1MYCwgYGVzY2FwZV9odG1sYCwgYW5kIGBo YCBhbGlhc2VkIHRvIGl0IGFscmVhZHksIEkgY2FuJ3QgdGhpbmsgb2YgYSBnb29kIG5hbWUgZm9y IGl0LiBBbmQgYWdhaW4sIG5vdCBjYWxsaW5nIGl0IGBlc2NhcGVIVE1MYCBvciBgZXNjYXBlX2h0 bWxgIHdvdWxkIHNwb2lsIHRoZSByZWFkYWJpbGl0eSBmb3Igbm8gdmFsaWQgcmVhc29uLgoKCgot LSAKaHR0cHM6Ly9idWdzLnJ1YnktbGFuZy5vcmcvCgpVbnN1YnNjcmliZTogPG1haWx0bzpydWJ5 LWNvcmUtcmVxdWVzdEBydWJ5LWxhbmcub3JnP3N1YmplY3Q9dW5zdWJzY3JpYmU+CjxodHRwOi8v bGlzdHMucnVieS1sYW5nLm9yZy9jZ2ktYmluL21haWxtYW4vb3B0aW9ucy9ydWJ5LWNvcmU+Cg==