[#110736] Can't sign in to bugs.ruby-lang.org — Daniel Berger <djberg96@...>
Hi,
4 messages
2022/11/13
[ruby-core:110589] [Ruby master Feature#19090] Do not duplicate an unescaped string in CGI.escapeHTML
From:
"Dan0042 (Daniel DeLorme)" <noreply@...>
Date:
2022-11-03 14:14:39 UTC
List:
ruby-core #110589
SXNzdWUgIzE5MDkwIGhhcyBiZWVuIHVwZGF0ZWQgYnkgRGFuMDA0MiAoRGFuaWVsIERlTG9ybWUp LgoKCkl0J3MgdHJ1ZSBBTExPQ1ZfTiBpcyBhbG1vc3QgZnJlZSBidXQgSSB3YXMgdGhpbmtpbmcg bW9yZSBhYm91dCB0aGUgY29zdCBvZiBjb3B5aW5nIGJldHdlZW4gYnVmZmVycwphKSB3aGVuIG5v dGhpbmcgbmVlZHMgZXNjYXBpbmc6IGNvcHkgYnl0ZXMgdG8gdG1wIGJ1ZmZlciB0aGVuIGRpc2Nh cmQKYikgd2hlbiBzb21ldGhpbmcgbmVlZHMgZXNjYXBpbmc6IGNvcHkgYnl0ZXMgdG8gdG1wIGJ1 ZmZlciB0aGVuIGNvcHkgYWdhaW4gdG8gZmluYWwgc3RyaW5nCgo+IFlvdSBzZWVtIHRvIGFzc3Vt ZSB0aGF0IHRoZSBidWZmZXIgaXMgYmFyZSBTdHJpbmcsIGJ1dCBpdCdzIG5vdCBuZWNlc3Nhcmls eSB0aGUgY2FzZSBmb3IgUmFpbHMuCgpJZiBidWZmZXIgaXMgYmFyZSBTdHJpbmcgd2UgY2FuIHVz ZSBgQ0dJLmVzY2FwZUhUTUwoc3RyLCBidWZmZXIpYCwgYW5kIGlmIHNvbWV0aGluZyBlbHNlIChB cnJheT8pIHdlIGNhbiB1c2UgYENHSS5lc2NhcGVIVE1MKHN0cilgLiBJIHRoaW5rIGl0J3Mgbmlj ZSB0byBzdXBwb3J0IGJvdGggY2FzZXMuCgo2eCBhbGxvY2F0aW9uIGlzIG9wdGltYWwgZm9yIHdv cnN0IGNhc3QgbGlrZSBgJyInICogMTAwMGAgYnV0IHBlcnNvbmFsbHkgSSB3b3VsZCBvcHRpbWl6 ZSBmb3IgY29tbW9uIGNhc2UuIFNvIGdyb3cgdGhlIHN0cmluZyBieSBhbiBhbW91bnQgc3VmZmlj aWVudCBmb3IgOTkuOSUgb2YgY2FzZXMgKG1heWJlIHNvbWV0aGluZyBsaWtlIChOKzMwKSoxLjIp IGFuZCBhY2NlcHQgYSByZWFsbG9jIGZvciBkZWdlbmVyYXRlIGNhc2VzLiBJdCdzIGEgZGlmZmVy ZW50IGtpbmQgb2YgY2hvaWNlL3RyYWRlLW9mZi4KClRoYW5rIHlvdSBmb3IgdGhlIGRpc2N1c3Np b24sIGl0J3MgYSBmdW4gdG9waWMuCgotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tCkZlYXR1cmUgIzE5MDkwOiBEbyBub3QgZHVwbGljYXRlIGFuIHVuZXNjYXBlZCBzdHJp bmcgaW4gQ0dJLmVzY2FwZUhUTUwKaHR0cHM6Ly9idWdzLnJ1YnktbGFuZy5vcmcvaXNzdWVzLzE5 MDkwI2NoYW5nZS05OTkyMQoKKiBBdXRob3I6IGswa3VidW4gKFRha2FzaGkgS29rdWJ1bikKKiBT dGF0dXM6IENsb3NlZAoqIFByaW9yaXR5OiBOb3JtYWwKLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLQojIyBQcm9wb3NhbApTdG9wIGd1YXJhbnRlZWluZyB0aGF0IGBHR0ku ZXNjYXBlSFRNTGAgcmV0dXJucyBhIG5ldyBzdHJpbmcgZXZlbiBpZiB0aGVyZSdzIG5vdGhpbmcg dG8gYmUgZXNjYXBlZC4KCk1vcmUgc3BlY2lmaWNhbGx5LCBzdG9wIGNhbGxpbmcgdGhpcyBgcmJf c3RyX2R1cGAgaHR0cHM6Ly9naXRodWIuY29tL3J1YnkvY2dpL2Jsb2IvdjAuMy4zL2V4dC9jZ2kv ZXNjYXBlL2VzY2FwZS5jI0w3MiBmb3IgdGhlIGNhc2UgdGhhdCBub3RoaW5nIG5lZWRzIHRvIGJl IGVzY2FwZWQuCgojIyBCYWNrZ3JvdW5kCk15IG9yaWdpbmFsIGltcGxlbWVudGF0aW9uIGh0dHBz Oi8vZ2l0aHViLmNvbS9ydWJ5L3J1YnkvcHVsbC8xMTY0IHdhcyBub3QgY2FsbGluZyBpdC4gVGhl IHJlYXNvbiB3aHkgYHJiX3N0cl9kdXBgIHdhcyBhZGRlZCB3YXMgdGhhdCBbQnVnICMxMTg1OF0g Y2xhaW1lZCByZXR1cm5pbmcgdGhlIGFyZ3VtZW50IG9iamVjdCBmb3Igbm9uLWVzY2FwZWQgY2Fz ZXMgaXMgYSBiYWNrd2FyZCBpbmNvbXBhdGliaWxpdHkgYmVjYXVzZSB0aGUgb3JpZ2luYWwgYGdz dWJgLWJhc2VkIGltcGxlbWVudGF0aW9uIGFsd2F5cyByZXR1cm5zIGEgbmV3IG9iamVjdC4gQXMg YSByZXN1bHQsIGV2ZW4gd2hpbGUgbWFueSBwZW9wbGUgdXNlIGBDR0kuZXNjYXBlSFRNTGAgYXMg YW4gb3B0aW1pemVkIGltcGxlbWVudGF0aW9uIGZvciBlc2NhcGluZyBIVE1MIHRvZGF5LCBpdCBl bmRlZCB1cCBoYXZpbmcgYSBjb21wcm9taXNlZCBwZXJmb3JtYW5jZS4KCiMjIE1vdGl2YXRpb24K VGhlIG1vdGl2YXRpb24gaXMgdG8gaW1wcm92ZSBwZXJmb3JtYW5jZS4gQnkganVzdCBkb2luZyBz bywgZXNjYXBpbmcgYSBwcmUtYWxsb2NhdGVkIGAic3RyaW5nImAgYmVjb21lcyAxLjM0eCBmYXN0 ZXIgb24gbXkgbWFjaGluZSBodHRwczovL2dpc3QuZ2l0aHViLmNvbS9rMGt1YnVuL2Y2NmQ2ZmUx ZTZiYTgyMWU0MjYzMjU3ZTUwNGJhMjhmLgoKVGhlIG1vc3QgbWFqb3IgdXNlIGNhc2Ugb2YgYENH UC5lc2NhcGVIVE1MYCBpcyB0byBzYWZlbHkgZW1iZWQgYSB1c2VyIGlucHV0LiBXaGVuIHRoZSBy ZXN1bHQgaXMganVzdCBlbWJlZGRlZCBpbiBhbm90aGVyIHN0cmluZywgdGhlIGFsbG9jYXRlZCBu ZXcgb2JqZWN0IHdpbGwgYmUganVzdCB3YXN0ZWQuIEl0J3MgcHJldHR5IGNvbW1vbiB0aGF0IGFu IGVtYmVkZGVkIHN0cmluZyBmcmFnbWVudCBkb2Vzbid0IGNvbnRhaW4gYW55IG9mIGAnIiY8PmAg Y2hhcmFjdGVycy4gU28gd2Ugc2hvdWxkIHN0b3Agd2FzdGluZyB0aGF0IHRvIG9wdGltaXplIHRo YXQgY2FzZS4KCltCdWcgIzExODU4XSB3YXNuJ3QgcmVhbGx5IGEgdXNlIGNhc2UgYnV0IGp1c3Qg IkkgdGhpbmsgdGhpcyBpcyBiYWNrd2FyZCBpbmNvbXBhdGliaWxpdHkiIGJhc2VkIG9uIGZyb3pl biBIZWxsbyBXb3JsZC4gVW5saWtlIHVzZXIgaW5wdXQsIHlvdSB1c3VhbGx5IGRvbid0IG5lZWQg dG8gZXNjYXBlIHlvdXIgb3duIHN0cmluZyBsaXRlcmFsLiBJdCBmZWVscyBsaWtlIHRoZSB0aWNr ZXQgYWRkcmVzc2VkIGEgcHJvYmxlbSB0aGF0IGRvZXNuJ3QgZXhpc3QgaW4gYWN0dWFsIGFwcGxp Y2F0aW9ucy4gSXQgc2hvdWxkIGhhdmUgY2l0ZWQgZXhpc3RpbmcgY29kZSB0aGF0IGNvdWxkIGJl IGJyb2tlbiBieSB0aGF0LCBhbmQgSSBjYW4ndCBmaW5kIHN1Y2ggY29kZSB3aXRoIGBnZW0tY29k ZXNlYXJjaGAgdG9kYXkuCgpUaGUgb25seSByZWFzb24gdG8gbWFpbnRhaW4gdGhlIGN1cnJlbnQg YmVoYXZpb3Igd291bGQgYmUgdG8gYWxsb3cgdXNpbmcgYSByZXR1cm4gdmFsdWUgb2YgYENHSS5l c2NhcGVIVE1MYCBhcyBhIGJ1ZmZlciBmb3IgY3JlYXRpbmcgYW5vdGhlciBsb25nZXIgc3RyaW5n IHN0YXJ0aW5nIHdpdGggdGhlIGVzY2FwZWQgdmFsdWUsIGJ1dCB1c2luZyBgQ0dJLmVzY2FwZUhU TUxgIHRvIGluaXRpYWxpemUgYSBzdHJpbmcgYnVmZmVyIGZlZWxzIGxpa2UgYW4gYWJ1c2UuIFJl bHlpbmcgb24gdGhlIGJlaGF2aW9yIG5ldmVyIG1ha2VzIHNlbnNlIGFzIGFuICJvcHRpbWl6YXRp b24iIGVpdGhlciBiZWNhdXNlIGl0IG1ha2VzIGFsbCBvdGhlciBjYXNlcyAodGhlIHJlc3VsdCBp cyBub3QgdXNlZCBhcyBhIHN0cmluZyBidWZmZXIpIHN1Ym9wdGltYWwuCgojIyBXaHkgbm90IGFu IG9wdGlvbmFsIGZsYWcgbGlrZSBgQ0dJLmVzY2FwZUhUTUwoc3RyLCBkdXA6IGZhbHNlKWA/ClR3 byByZWFzb25zOgoKKiBUaGUgbm9uLWR1cCBiZWhhdmlvciBzaG91bGQgYmUgdXNlZCA5OS45OTku LjklIG9mIHRoZSB0aW1lLiBXZSBzaG91bGRuJ3QgbWFrZSBjb2RlIHVzaW5nIGBDR0kuZXNjYXBl SFRNTGAgbGVzcyByZWFkYWJsZSBqdXN0IGZvciBtYWludGFpbmluZyBhIHVzZSBjYXNlIHRoYXQg ZG9lc24ndCBleGlzdC4KKiBQYXNzaW5nIGtleXdvcmQgYXJndW1lbnRzIHRvIGEgQyBleHRlbnNp b24gaXMgdW5mb3J0dW5hdGVseSBzbG93LCBhbmQgaXQgZGVmZWF0cyB0aGUgb3B0aW1pemF0aW9u IHB1cnBvc2UuIEluIGNvcmUgY2xhc3Nlcywgd2UgY291bGQgdXNlIGBQcmltaXRpdmVgIHRvIGFk ZHJlc3MgdGhhdCwgYnV0IHRoaXMgaXMgYSBkZWZhdWx0IGdlbSBhbmQgd2UgY2FuJ3QgdXNlIHRo YXQuCiAgKiBXZSBjb3VsZCB3b3JrYXJvdW5kIHRoYXQgaWYgd2UgY2hvb3NlIGBDR0kuZXNjYXBl SFRNTChzdHIsIGZhbHNlKWAsIGJ1dCBhZ2FpbiBpdCdkIHNwb2lsIHRoZSByZWFkYWJpbGl0eSBm b3IgbWFpbnRhaW5pbmcgYW4gaW52YWxpZCB1c2UgY2FzZS4KCiMjIFdoeSBub3QgYSBuZXcgbWV0 aG9kPwoKSXQncyBhIGdvb2QgaWRlYSBhY3R1YWxseSwgYnV0IHdpdGggYGVzY2FwZUhUTUxgLCBg ZXNjYXBlX2h0bWxgLCBhbmQgYGhgIGFsaWFzZWQgdG8gaXQgYWxyZWFkeSwgSSBjYW4ndCB0aGlu ayBvZiBhIGdvb2QgbmFtZSBmb3IgaXQuIEFuZCBhZ2Fpbiwgbm90IGNhbGxpbmcgaXQgYGVzY2Fw ZUhUTUxgIG9yIGBlc2NhcGVfaHRtbGAgd291bGQgc3BvaWwgdGhlIHJlYWRhYmlsaXR5IGZvciBu byB2YWxpZCByZWFzb24uCgoKCi0tIApodHRwczovL2J1Z3MucnVieS1sYW5nLm9yZy8KClVuc3Vi c2NyaWJlOiA8bWFpbHRvOnJ1YnktY29yZS1yZXF1ZXN0QHJ1YnktbGFuZy5vcmc/c3ViamVjdD11 bnN1YnNjcmliZT4KPGh0dHA6Ly9saXN0cy5ydWJ5LWxhbmcub3JnL2NnaS1iaW4vbWFpbG1hbi9v cHRpb25zL3J1YnktY29yZT4K