[#110736] Can't sign in to bugs.ruby-lang.org — Daniel Berger <djberg96@...>
Hi,
4 messages
2022/11/13
[ruby-core:110586] [Ruby master Feature#19090] Do not duplicate an unescaped string in CGI.escapeHTML
From:
"k0kubun (Takashi Kokubun)" <noreply@...>
Date:
2022-11-02 20:18:01 UTC
List:
ruby-core #110586
SXNzdWUgIzE5MDkwIGhhcyBiZWVuIHVwZGF0ZWQgYnkgazBrdWJ1biAoVGFrYXNoaSBLb2t1YnVu KS4KCgpXZSBtaWdodCBiZSBhYmxlIHRvIG1ha2UgaXQgZWZmaWNpZW50IGZvciBhIG5vbi1TdHJp bmcgYnVmZmVyIHRvbywgc28gSSdsbCBnaXZlIGl0IGEgdHJ5IGZpcnN0LiBUaGFua3MgZm9yIHRo ZSBpZGVhLgoKLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQpGZWF0dXJl ICMxOTA5MDogRG8gbm90IGR1cGxpY2F0ZSBhbiB1bmVzY2FwZWQgc3RyaW5nIGluIENHSS5lc2Nh cGVIVE1MCmh0dHBzOi8vYnVncy5ydWJ5LWxhbmcub3JnL2lzc3Vlcy8xOTA5MCNjaGFuZ2UtOTk5 MTgKCiogQXV0aG9yOiBrMGt1YnVuIChUYWthc2hpIEtva3VidW4pCiogU3RhdHVzOiBPcGVuCiog UHJpb3JpdHk6IE5vcm1hbAotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t CiMjIFByb3Bvc2FsClN0b3AgZ3VhcmFudGVlaW5nIHRoYXQgYEdHSS5lc2NhcGVIVE1MYCByZXR1 cm5zIGEgbmV3IHN0cmluZyBldmVuIGlmIHRoZXJlJ3Mgbm90aGluZyB0byBiZSBlc2NhcGVkLgoK TW9yZSBzcGVjaWZpY2FsbHksIHN0b3AgY2FsbGluZyB0aGlzIGByYl9zdHJfZHVwYCBodHRwczov L2dpdGh1Yi5jb20vcnVieS9jZ2kvYmxvYi92MC4zLjMvZXh0L2NnaS9lc2NhcGUvZXNjYXBlLmMj TDcyIGZvciB0aGUgY2FzZSB0aGF0IG5vdGhpbmcgbmVlZHMgdG8gYmUgZXNjYXBlZC4KCiMjIEJh Y2tncm91bmQKTXkgb3JpZ2luYWwgaW1wbGVtZW50YXRpb24gaHR0cHM6Ly9naXRodWIuY29tL3J1 YnkvcnVieS9wdWxsLzExNjQgd2FzIG5vdCBjYWxsaW5nIGl0LiBUaGUgcmVhc29uIHdoeSBgcmJf c3RyX2R1cGAgd2FzIGFkZGVkIHdhcyB0aGF0IFtCdWcgIzExODU4XSBjbGFpbWVkIHJldHVybmlu ZyB0aGUgYXJndW1lbnQgb2JqZWN0IGZvciBub24tZXNjYXBlZCBjYXNlcyBpcyBhIGJhY2t3YXJk IGluY29tcGF0aWJpbGl0eSBiZWNhdXNlIHRoZSBvcmlnaW5hbCBgZ3N1YmAtYmFzZWQgaW1wbGVt ZW50YXRpb24gYWx3YXlzIHJldHVybnMgYSBuZXcgb2JqZWN0LiBBcyBhIHJlc3VsdCwgZXZlbiB3 aGlsZSBtYW55IHBlb3BsZSB1c2UgYENHSS5lc2NhcGVIVE1MYCBhcyBhbiBvcHRpbWl6ZWQgaW1w bGVtZW50YXRpb24gZm9yIGVzY2FwaW5nIEhUTUwgdG9kYXksIGl0IGVuZGVkIHVwIGhhdmluZyBh IGNvbXByb21pc2VkIHBlcmZvcm1hbmNlLgoKIyMgTW90aXZhdGlvbgpUaGUgbW90aXZhdGlvbiBp cyB0byBpbXByb3ZlIHBlcmZvcm1hbmNlLiBCeSBqdXN0IGRvaW5nIHNvLCBlc2NhcGluZyBhIHBy ZS1hbGxvY2F0ZWQgYCJzdHJpbmciYCBiZWNvbWVzIDEuMzR4IGZhc3RlciBvbiBteSBtYWNoaW5l IGh0dHBzOi8vZ2lzdC5naXRodWIuY29tL2swa3VidW4vZjY2ZDZmZTFlNmJhODIxZTQyNjMyNTdl NTA0YmEyOGYuCgpUaGUgbW9zdCBtYWpvciB1c2UgY2FzZSBvZiBgQ0dQLmVzY2FwZUhUTUxgIGlz IHRvIHNhZmVseSBlbWJlZCBhIHVzZXIgaW5wdXQuIFdoZW4gdGhlIHJlc3VsdCBpcyBqdXN0IGVt YmVkZGVkIGluIGFub3RoZXIgc3RyaW5nLCB0aGUgYWxsb2NhdGVkIG5ldyBvYmplY3Qgd2lsbCBi ZSBqdXN0IHdhc3RlZC4gSXQncyBwcmV0dHkgY29tbW9uIHRoYXQgYW4gZW1iZWRkZWQgc3RyaW5n IGZyYWdtZW50IGRvZXNuJ3QgY29udGFpbiBhbnkgb2YgYCciJjw+YCBjaGFyYWN0ZXJzLiBTbyB3 ZSBzaG91bGQgc3RvcCB3YXN0aW5nIHRoYXQgdG8gb3B0aW1pemUgdGhhdCBjYXNlLgoKW0J1ZyAj MTE4NThdIHdhc24ndCByZWFsbHkgYSB1c2UgY2FzZSBidXQganVzdCAiSSB0aGluayB0aGlzIGlz IGJhY2t3YXJkIGluY29tcGF0aWJpbGl0eSIgYmFzZWQgb24gZnJvemVuIEhlbGxvIFdvcmxkLiBV bmxpa2UgdXNlciBpbnB1dCwgeW91IHVzdWFsbHkgZG9uJ3QgbmVlZCB0byBlc2NhcGUgeW91ciBv d24gc3RyaW5nIGxpdGVyYWwuIEl0IGZlZWxzIGxpa2UgdGhlIHRpY2tldCBhZGRyZXNzZWQgYSBw cm9ibGVtIHRoYXQgZG9lc24ndCBleGlzdCBpbiBhY3R1YWwgYXBwbGljYXRpb25zLiBJdCBzaG91 bGQgaGF2ZSBjaXRlZCBleGlzdGluZyBjb2RlIHRoYXQgY291bGQgYmUgYnJva2VuIGJ5IHRoYXQs IGFuZCBJIGNhbid0IGZpbmQgc3VjaCBjb2RlIHdpdGggYGdlbS1jb2Rlc2VhcmNoYCB0b2RheS4K ClRoZSBvbmx5IHJlYXNvbiB0byBtYWludGFpbiB0aGUgY3VycmVudCBiZWhhdmlvciB3b3VsZCBi ZSB0byBhbGxvdyB1c2luZyBhIHJldHVybiB2YWx1ZSBvZiBgQ0dJLmVzY2FwZUhUTUxgIGFzIGEg YnVmZmVyIGZvciBjcmVhdGluZyBhbm90aGVyIGxvbmdlciBzdHJpbmcgc3RhcnRpbmcgd2l0aCB0 aGUgZXNjYXBlZCB2YWx1ZSwgYnV0IHVzaW5nIGBDR0kuZXNjYXBlSFRNTGAgdG8gaW5pdGlhbGl6 ZSBhIHN0cmluZyBidWZmZXIgZmVlbHMgbGlrZSBhbiBhYnVzZS4gUmVseWluZyBvbiB0aGUgYmVo YXZpb3IgbmV2ZXIgbWFrZXMgc2Vuc2UgYXMgYW4gIm9wdGltaXphdGlvbiIgZWl0aGVyIGJlY2F1 c2UgaXQgbWFrZXMgYWxsIG90aGVyIGNhc2VzICh0aGUgcmVzdWx0IGlzIG5vdCB1c2VkIGFzIGEg c3RyaW5nIGJ1ZmZlcikgc3Vib3B0aW1hbC4KCiMjIFdoeSBub3QgYW4gb3B0aW9uYWwgZmxhZyBs aWtlIGBDR0kuZXNjYXBlSFRNTChzdHIsIGR1cDogZmFsc2UpYD8KVHdvIHJlYXNvbnM6CgoqIFRo ZSBub24tZHVwIGJlaGF2aW9yIHNob3VsZCBiZSB1c2VkIDk5Ljk5OS4uOSUgb2YgdGhlIHRpbWUu IFdlIHNob3VsZG4ndCBtYWtlIGNvZGUgdXNpbmcgYENHSS5lc2NhcGVIVE1MYCBsZXNzIHJlYWRh YmxlIGp1c3QgZm9yIG1haW50YWluaW5nIGEgdXNlIGNhc2UgdGhhdCBkb2Vzbid0IGV4aXN0Lgoq IFBhc3Npbmcga2V5d29yZCBhcmd1bWVudHMgdG8gYSBDIGV4dGVuc2lvbiBpcyB1bmZvcnR1bmF0 ZWx5IHNsb3csIGFuZCBpdCBkZWZlYXRzIHRoZSBvcHRpbWl6YXRpb24gcHVycG9zZS4gSW4gY29y ZSBjbGFzc2VzLCB3ZSBjb3VsZCB1c2UgYFByaW1pdGl2ZWAgdG8gYWRkcmVzcyB0aGF0LCBidXQg dGhpcyBpcyBhIGRlZmF1bHQgZ2VtIGFuZCB3ZSBjYW4ndCB1c2UgdGhhdC4KICAqIFdlIGNvdWxk IHdvcmthcm91bmQgdGhhdCBpZiB3ZSBjaG9vc2UgYENHSS5lc2NhcGVIVE1MKHN0ciwgZmFsc2Up YCwgYnV0IGFnYWluIGl0J2Qgc3BvaWwgdGhlIHJlYWRhYmlsaXR5IGZvciBtYWludGFpbmluZyBh biBpbnZhbGlkIHVzZSBjYXNlLgoKIyMgV2h5IG5vdCBhIG5ldyBtZXRob2Q/CgpJdCdzIGEgZ29v ZCBpZGVhIGFjdHVhbGx5LCBidXQgd2l0aCBgZXNjYXBlSFRNTGAsIGBlc2NhcGVfaHRtbGAsIGFu ZCBgaGAgYWxpYXNlZCB0byBpdCBhbHJlYWR5LCBJIGNhbid0IHRoaW5rIG9mIGEgZ29vZCBuYW1l IGZvciBpdC4gQW5kIGFnYWluLCBub3QgY2FsbGluZyBpdCBgZXNjYXBlSFRNTGAgb3IgYGVzY2Fw ZV9odG1sYCB3b3VsZCBzcG9pbCB0aGUgcmVhZGFiaWxpdHkgZm9yIG5vIHZhbGlkIHJlYXNvbi4K CgoKLS0gCmh0dHBzOi8vYnVncy5ydWJ5LWxhbmcub3JnLwoKVW5zdWJzY3JpYmU6IDxtYWlsdG86 cnVieS1jb3JlLXJlcXVlc3RAcnVieS1sYW5nLm9yZz9zdWJqZWN0PXVuc3Vic2NyaWJlPgo8aHR0 cDovL2xpc3RzLnJ1YnktbGFuZy5vcmcvY2dpLWJpbi9tYWlsbWFuL29wdGlvbnMvcnVieS1jb3Jl Pgo=