[#110736] Can't sign in to bugs.ruby-lang.org — Daniel Berger <djberg96@...>
Hi,
4 messages
2022/11/13
[ruby-core:110587] [Ruby master Feature#19090] Do not duplicate an unescaped string in CGI.escapeHTML
From:
"k0kubun (Takashi Kokubun)" <noreply@...>
Date:
2022-11-03 05:16:48 UTC
List:
ruby-core #110587
SXNzdWUgIzE5MDkwIGhhcyBiZWVuIHVwZGF0ZWQgYnkgazBrdWJ1biAoVGFrYXNoaSBLb2t1YnVu KS4KClN0YXR1cyBjaGFuZ2VkIGZyb20gT3BlbiB0byBDbG9zZWQKCk9uIHNlY29uZCB0aG91Z2h0 LCBpdCBtaWdodCBub3QgYmUgbmVjZXNzYXJpbHkgbW9yZSBlZmZpY2llbnQgZXZlbiB3aXRoIGEg YmFyZSBTdHJpbmcgYnVmZmVyIGJlY2F1c2UgdGhlIHBvaW50IG9mIHRoZSBjdXJyZW50IGBDR0ku ZXNjYXBlSFRNTGAgaW1wbGVtZW50YXRpb24gaXMgdG8gcHJlLWFsbG9jYXRlIGEgNXgtc2l6ZSBi dWZmZXIgb24gdGhlIHN0YWNrIHRvIGF2b2lkIG11bHRpcGxlIHJlYWxsb2NhdGlvbnMgZm9yIGJ1 ZmZlciBleHRlbnNpb24uIFRoYXQgb3B0aW1pemF0aW9uIGlzIGhhcmQgaWYgeW91IG5lZWQgdG8g ZGlyZWN0bHkgd3JpdGUgdG8gdGhlIGFyZ3VtZW50IFN0cmluZyBmcm9tIHRoZSBiZWdpbm5pbmc7 IHRoZSBiZXN0IHRoaW5nIHlvdSBjb3VsZCBkbyB3b3VsZCBiZSB0byBgcmVhbGxvY2AgaXQgdG8g YSA1eCBzaXplIGZpcnN0IGFuZCB0aGVuIGByZWFsbG9jYCBpdCBhZ2FpbiB0byBzaHJpbmsgaXQu IERvaW5nIG9iamVjdCByZWFsbG9jYXRpb24gdHdpY2Ugc2VlbXMgZXhwZW5zaXZlIGNvbXBhcmVk IHRvIGp1c3QgbWFuaXB1bGF0aW5nIGEgc3RhY2sgcG9pbnRlciwgZXZlbiBjb21iaW5lZCB3aXRo IGV4dHJhIGBtZW1jcHlgLiAKClBsdXMsIGFzIGEgbWFpbnRhaW5lciBvZiBtYW55IHRlbXBsYXRl IGVuZ2luZXMsIHRoaXMgaW50ZXJmYWNlIHNlZW1zIGhhcmQgdG8gdXNlIGluIHNvbWUgY2FzZXMu IEl0IHNlZW1zIHRvIGhlbHAgb25seSBsaW1pdGVkIHBsYWNlcyB3aXRoIGEgbG90IG9mIGNvbXBs ZXhpdHkuCgotLS0KCkkgY2FtZSB1cCB3aXRoIGEgY29tcGxldGVseSBkaWZmZXJlbnQgc29sdXRp b24uIEknbGwgZmlsZSBpdCBhcyBhIGRpZmZlcmVudCB0aWNrZXQgYWZ0ZXIgdmVyaWZ5aW5nIHRo ZSBpZGVhLiBTbyBjbG9zaW5nIHRoaXMuIFRoYW5rIHlvdSBmb3IgdGhlIGRpc2N1c3Npb24uCgot LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCkZlYXR1cmUgIzE5MDkwOiBE byBub3QgZHVwbGljYXRlIGFuIHVuZXNjYXBlZCBzdHJpbmcgaW4gQ0dJLmVzY2FwZUhUTUwKaHR0 cHM6Ly9idWdzLnJ1YnktbGFuZy5vcmcvaXNzdWVzLzE5MDkwI2NoYW5nZS05OTkxOQoKKiBBdXRo b3I6IGswa3VidW4gKFRha2FzaGkgS29rdWJ1bikKKiBTdGF0dXM6IENsb3NlZAoqIFByaW9yaXR5 OiBOb3JtYWwKLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQojIyBQcm9w b3NhbApTdG9wIGd1YXJhbnRlZWluZyB0aGF0IGBHR0kuZXNjYXBlSFRNTGAgcmV0dXJucyBhIG5l dyBzdHJpbmcgZXZlbiBpZiB0aGVyZSdzIG5vdGhpbmcgdG8gYmUgZXNjYXBlZC4KCk1vcmUgc3Bl Y2lmaWNhbGx5LCBzdG9wIGNhbGxpbmcgdGhpcyBgcmJfc3RyX2R1cGAgaHR0cHM6Ly9naXRodWIu Y29tL3J1YnkvY2dpL2Jsb2IvdjAuMy4zL2V4dC9jZ2kvZXNjYXBlL2VzY2FwZS5jI0w3MiBmb3Ig dGhlIGNhc2UgdGhhdCBub3RoaW5nIG5lZWRzIHRvIGJlIGVzY2FwZWQuCgojIyBCYWNrZ3JvdW5k Ck15IG9yaWdpbmFsIGltcGxlbWVudGF0aW9uIGh0dHBzOi8vZ2l0aHViLmNvbS9ydWJ5L3J1Ynkv cHVsbC8xMTY0IHdhcyBub3QgY2FsbGluZyBpdC4gVGhlIHJlYXNvbiB3aHkgYHJiX3N0cl9kdXBg IHdhcyBhZGRlZCB3YXMgdGhhdCBbQnVnICMxMTg1OF0gY2xhaW1lZCByZXR1cm5pbmcgdGhlIGFy Z3VtZW50IG9iamVjdCBmb3Igbm9uLWVzY2FwZWQgY2FzZXMgaXMgYSBiYWNrd2FyZCBpbmNvbXBh dGliaWxpdHkgYmVjYXVzZSB0aGUgb3JpZ2luYWwgYGdzdWJgLWJhc2VkIGltcGxlbWVudGF0aW9u IGFsd2F5cyByZXR1cm5zIGEgbmV3IG9iamVjdC4gQXMgYSByZXN1bHQsIGV2ZW4gd2hpbGUgbWFu eSBwZW9wbGUgdXNlIGBDR0kuZXNjYXBlSFRNTGAgYXMgYW4gb3B0aW1pemVkIGltcGxlbWVudGF0 aW9uIGZvciBlc2NhcGluZyBIVE1MIHRvZGF5LCBpdCBlbmRlZCB1cCBoYXZpbmcgYSBjb21wcm9t aXNlZCBwZXJmb3JtYW5jZS4KCiMjIE1vdGl2YXRpb24KVGhlIG1vdGl2YXRpb24gaXMgdG8gaW1w cm92ZSBwZXJmb3JtYW5jZS4gQnkganVzdCBkb2luZyBzbywgZXNjYXBpbmcgYSBwcmUtYWxsb2Nh dGVkIGAic3RyaW5nImAgYmVjb21lcyAxLjM0eCBmYXN0ZXIgb24gbXkgbWFjaGluZSBodHRwczov L2dpc3QuZ2l0aHViLmNvbS9rMGt1YnVuL2Y2NmQ2ZmUxZTZiYTgyMWU0MjYzMjU3ZTUwNGJhMjhm LgoKVGhlIG1vc3QgbWFqb3IgdXNlIGNhc2Ugb2YgYENHUC5lc2NhcGVIVE1MYCBpcyB0byBzYWZl bHkgZW1iZWQgYSB1c2VyIGlucHV0LiBXaGVuIHRoZSByZXN1bHQgaXMganVzdCBlbWJlZGRlZCBp biBhbm90aGVyIHN0cmluZywgdGhlIGFsbG9jYXRlZCBuZXcgb2JqZWN0IHdpbGwgYmUganVzdCB3 YXN0ZWQuIEl0J3MgcHJldHR5IGNvbW1vbiB0aGF0IGFuIGVtYmVkZGVkIHN0cmluZyBmcmFnbWVu dCBkb2Vzbid0IGNvbnRhaW4gYW55IG9mIGAnIiY8PmAgY2hhcmFjdGVycy4gU28gd2Ugc2hvdWxk IHN0b3Agd2FzdGluZyB0aGF0IHRvIG9wdGltaXplIHRoYXQgY2FzZS4KCltCdWcgIzExODU4XSB3 YXNuJ3QgcmVhbGx5IGEgdXNlIGNhc2UgYnV0IGp1c3QgIkkgdGhpbmsgdGhpcyBpcyBiYWNrd2Fy ZCBpbmNvbXBhdGliaWxpdHkiIGJhc2VkIG9uIGZyb3plbiBIZWxsbyBXb3JsZC4gVW5saWtlIHVz ZXIgaW5wdXQsIHlvdSB1c3VhbGx5IGRvbid0IG5lZWQgdG8gZXNjYXBlIHlvdXIgb3duIHN0cmlu ZyBsaXRlcmFsLiBJdCBmZWVscyBsaWtlIHRoZSB0aWNrZXQgYWRkcmVzc2VkIGEgcHJvYmxlbSB0 aGF0IGRvZXNuJ3QgZXhpc3QgaW4gYWN0dWFsIGFwcGxpY2F0aW9ucy4gSXQgc2hvdWxkIGhhdmUg Y2l0ZWQgZXhpc3RpbmcgY29kZSB0aGF0IGNvdWxkIGJlIGJyb2tlbiBieSB0aGF0LCBhbmQgSSBj YW4ndCBmaW5kIHN1Y2ggY29kZSB3aXRoIGBnZW0tY29kZXNlYXJjaGAgdG9kYXkuCgpUaGUgb25s eSByZWFzb24gdG8gbWFpbnRhaW4gdGhlIGN1cnJlbnQgYmVoYXZpb3Igd291bGQgYmUgdG8gYWxs b3cgdXNpbmcgYSByZXR1cm4gdmFsdWUgb2YgYENHSS5lc2NhcGVIVE1MYCBhcyBhIGJ1ZmZlciBm b3IgY3JlYXRpbmcgYW5vdGhlciBsb25nZXIgc3RyaW5nIHN0YXJ0aW5nIHdpdGggdGhlIGVzY2Fw ZWQgdmFsdWUsIGJ1dCB1c2luZyBgQ0dJLmVzY2FwZUhUTUxgIHRvIGluaXRpYWxpemUgYSBzdHJp bmcgYnVmZmVyIGZlZWxzIGxpa2UgYW4gYWJ1c2UuIFJlbHlpbmcgb24gdGhlIGJlaGF2aW9yIG5l dmVyIG1ha2VzIHNlbnNlIGFzIGFuICJvcHRpbWl6YXRpb24iIGVpdGhlciBiZWNhdXNlIGl0IG1h a2VzIGFsbCBvdGhlciBjYXNlcyAodGhlIHJlc3VsdCBpcyBub3QgdXNlZCBhcyBhIHN0cmluZyBi dWZmZXIpIHN1Ym9wdGltYWwuCgojIyBXaHkgbm90IGFuIG9wdGlvbmFsIGZsYWcgbGlrZSBgQ0dJ LmVzY2FwZUhUTUwoc3RyLCBkdXA6IGZhbHNlKWA/ClR3byByZWFzb25zOgoKKiBUaGUgbm9uLWR1 cCBiZWhhdmlvciBzaG91bGQgYmUgdXNlZCA5OS45OTkuLjklIG9mIHRoZSB0aW1lLiBXZSBzaG91 bGRuJ3QgbWFrZSBjb2RlIHVzaW5nIGBDR0kuZXNjYXBlSFRNTGAgbGVzcyByZWFkYWJsZSBqdXN0 IGZvciBtYWludGFpbmluZyBhIHVzZSBjYXNlIHRoYXQgZG9lc24ndCBleGlzdC4KKiBQYXNzaW5n IGtleXdvcmQgYXJndW1lbnRzIHRvIGEgQyBleHRlbnNpb24gaXMgdW5mb3J0dW5hdGVseSBzbG93 LCBhbmQgaXQgZGVmZWF0cyB0aGUgb3B0aW1pemF0aW9uIHB1cnBvc2UuIEluIGNvcmUgY2xhc3Nl cywgd2UgY291bGQgdXNlIGBQcmltaXRpdmVgIHRvIGFkZHJlc3MgdGhhdCwgYnV0IHRoaXMgaXMg YSBkZWZhdWx0IGdlbSBhbmQgd2UgY2FuJ3QgdXNlIHRoYXQuCiAgKiBXZSBjb3VsZCB3b3JrYXJv dW5kIHRoYXQgaWYgd2UgY2hvb3NlIGBDR0kuZXNjYXBlSFRNTChzdHIsIGZhbHNlKWAsIGJ1dCBh Z2FpbiBpdCdkIHNwb2lsIHRoZSByZWFkYWJpbGl0eSBmb3IgbWFpbnRhaW5pbmcgYW4gaW52YWxp ZCB1c2UgY2FzZS4KCiMjIFdoeSBub3QgYSBuZXcgbWV0aG9kPwoKSXQncyBhIGdvb2QgaWRlYSBh Y3R1YWxseSwgYnV0IHdpdGggYGVzY2FwZUhUTUxgLCBgZXNjYXBlX2h0bWxgLCBhbmQgYGhgIGFs aWFzZWQgdG8gaXQgYWxyZWFkeSwgSSBjYW4ndCB0aGluayBvZiBhIGdvb2QgbmFtZSBmb3IgaXQu IEFuZCBhZ2Fpbiwgbm90IGNhbGxpbmcgaXQgYGVzY2FwZUhUTUxgIG9yIGBlc2NhcGVfaHRtbGAg d291bGQgc3BvaWwgdGhlIHJlYWRhYmlsaXR5IGZvciBubyB2YWxpZCByZWFzb24uCgoKCi0tIApo dHRwczovL2J1Z3MucnVieS1sYW5nLm9yZy8KClVuc3Vic2NyaWJlOiA8bWFpbHRvOnJ1YnktY29y ZS1yZXF1ZXN0QHJ1YnktbGFuZy5vcmc/c3ViamVjdD11bnN1YnNjcmliZT4KPGh0dHA6Ly9saXN0 cy5ydWJ5LWxhbmcub3JnL2NnaS1iaW4vbWFpbG1hbi9vcHRpb25zL3J1YnktY29yZT4K