[ruby-core:118895] [Ruby master Bug#20686] URI::HTTPS can build URI with blank, invalid host
From:
"jeremyevans0 (Jeremy Evans) via ruby-core" <ruby-core@...>
Date:
2024-08-19 20:04:48 UTC
List:
ruby-core #118895
SXNzdWUgIzIwNjg2IGhhcyBiZWVuIHVwZGF0ZWQgYnkgamVyZW15ZXZhbnMwIChKZXJlbXkgRXZh bnMpLg0KDQoNCnJvbnJpY2FyZG8gKFJvbmllY2UgUmljYXJkbykgd3JvdGU6DQo+IEluIFJ1Ynkg My40LjArLCBjYWxsaW5nIGBVUkk6OkhUVFBTLmJ1aWxkKGhvc3Q6ICIiKWAgZG9lcyBub3QgcmFp c2UgYFVSSTo6SW52YWxpZENvbXBvbmVudEVycm9yYCBhcyBleHBlY3RlZC4gSW5zdGVhZCwgaXQg cmV0dXJucyBgIzxVUkk6OkhUVFBTIGh0dHBzOi8vPmAgDQo+IA0KPiBJIHRoaW5rIHRoaXMgd2Fz IGludHJvZHVjZWQgaW4gW3RoaXMgUFJdKGh0dHBzOi8vZ2l0aHViLmNvbS9ydWJ5L3VyaS9wdWxs LzkwKS4NCg0KVGhhdCBQUiBvbmx5IGFmZmVjdHMgYCN0b19zYCwgbm90IGAuYnVpbGRgLCBhbmQg aXMgdW5yZWxhdGVkLiAgVGhpcyB3YXMgY2F1c2VkIGJ5IHRoZSBSRkMgMjM5NiAtPiBSRkMgMzk4 NiBwYXJzZXIgY2hhbmdlOg0KDQpgYGBydWJ5DQpVUkk6OkhUVFBTLm5ldyhuaWwsIG5pbCwgIiIs IG5pbCwgbmlsLCBuaWwsIG5pbCwgbmlsLCBuaWwsIFVSSTo6UkZDMzk4Nl9QQVJTRVIsIHRydWUp IA0KIyA9PiAjPFVSSTo6SFRUUFMgLy8+DQoNClVSSTo6SFRUUFMubmV3KG5pbCwgbmlsLCAiIiwg bmlsLCBuaWwsIG5pbCwgbmlsLCBuaWwsIG5pbCwgVVJJOjpSRkMyMzk2X1BBUlNFUiwgdHJ1ZSkN CiMgL2hvbWUvamVyZW15L3RtcC91cmkvbGliL3VyaS9nZW5lcmljLnJiOjYwMTppbiBgY2hlY2tf aG9zdCc6IGJhZCBjb21wb25lbnQoZXhwZWN0ZWQgaG9zdCBjb21wb25lbnQpOiAgKFVSSTo6SW52 YWxpZENvbXBvbmVudEVycm9yKQ0KYGBgDQoNCkl0IGFwcGVhcnMgUkZDIDM5ODYgYWxsb3dzIGVt cHR5IGhvc3RzIChodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL3JmYzM5ODYj c2VjdGlvbi0zLjIuMjogYHJlZy1uYW1lICAgID0gKiggdW5yZXNlcnZlZCAvIHBjdC1lbmNvZGVk IC8gc3ViLWRlbGltcyApYCksIHNvIEkgdGhpbmsgdGhpcyBpcyBub3QgYSBidWcsIGJ1dCBhbiBl eHBlY3RlZCBiZWhhdmlvciBjaGFuZ2UuDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCkJ1ZyAjMjA2ODY6IFVSSTo6SFRUUFMgY2FuIGJ1aWxkIFVSSSB3aXRoIGJs YW5rLCBpbnZhbGlkIGhvc3QNCmh0dHBzOi8vYnVncy5ydWJ5LWxhbmcub3JnL2lzc3Vlcy8yMDY4 NiNjaGFuZ2UtMTA5NDY0DQoNCiogQXV0aG9yOiByb25yaWNhcmRvIChSb25pZWNlIFJpY2FyZG8p DQoqIFN0YXR1czogT3Blbg0KKiBydWJ5IC12OiAzLjQuMCsNCiogQmFja3BvcnQ6IDMuMTogVU5L Tk9XTiwgMy4yOiBVTktOT1dOLCAzLjM6IFVOS05PV04NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NCkluIFJ1YnkgMy40LjArLCBjYWxsaW5nIGBVUkk6OkhUVFBTLmJ1 aWxkKGhvc3Q6ICIiKWAgZG9lcyBub3QgcmFpc2UgYFVSSTo6SW52YWxpZENvbXBvbmVudEVycm9y YCBhcyBleHBlY3RlZC4gSW5zdGVhZCwgaXQgcmV0dXJucyBgIzxVUkk6OkhUVFBTIGh0dHBzOi8v PmAgDQoNCkkgdGhpbmsgdGhpcyB3YXMgaW50cm9kdWNlZCBpbiBbdGhpcyBQUl0oaHR0cHM6Ly9n aXRodWIuY29tL3J1YnkvdXJpL3B1bGwvOTApLg0KDQojIyBTdGVwcyB0byBSZXByb2R1Y2UNCg0K IyMjIDEuIEVudmlyb25tZW50Og0KLSAqKlJ1YnkgVmVyc2lvbjoqKiAzLjQuMCsNCg0KIyMjIDIu IFN0ZXBzOg0KLSBPcGVuIGFuIElSQiBzZXNzaW9uLg0KLSBSdW46DQoNCiAgYGBgcnVieQ0KICBV Ukk6OkhUVFBTLmJ1aWxkKGhvc3Q6ICIiKQ0KICBgYGANCg0KIyMjIDMuIEV4cGVjdGVkIEJlaGF2 aW9yOg0KLSBgVVJJOjpJbnZhbGlkQ29tcG9uZW50RXJyb3JgIHNob3VsZCBiZSByYWlzZWQgZHVl IHRvIHRoZSBpbnZhbGlkIGVtcHR5IGBob3N0YCBjb21wb25lbnQuDQoNCiMjIyA0LiBBY3R1YWwg QmVoYXZpb3I6DQotIFJldHVybnMgYCM8VVJJOjpIVFRQUyBodHRwczovLz5gIHdpdGhvdXQgcmFp c2luZyBhbiBlcnJvci4NCg0KDQojIyMgUnVieSAzLjEuNDoNCmBgYHJ1YnkNCmlyYihtYWluKTow MDg6MD4gUlVCWV9WRVJTSU9ODQo9PiAiMy4xLjQiDQppcmIobWFpbik6MDA5OjA+IFVSSTo6SFRU UFMuYnVpbGQoaG9zdDoiIikNCi9ob21lL3ZzY29kZS8ucmJlbnYvdmVyc2lvbnMvMy4xLjQvbGli L3J1YnkvMy4xLjAvdXJpL2dlbmVyaWMucmI6NjAxOmluIGBjaGVja19ob3N0JzogYmFkIGNvbXBv bmVudChleHBlY3RlZCBob3N0IGNvbXBvbmVudCk6ICAoVVJJOjpJbnZhbGlkQ29tcG9uZW50RXJy b3IpDQpgYGANCg0KIyMjIFJ1YnkgMy40LjA6DQpgYGBydWJ5DQppcmIo4oCmKTowMTU+IFJVQllf VkVSU0lPTg0KPT4gIjMuNC4wIg0KaXJiKC4uLik6MDE2PiBVUkk6OkhUVFBTLmJ1aWxkKGhvc3Q6 IiIpDQo9PiAjPFVSSTo6SFRUUFMgaHR0cHM6Ly8+DQpgYGANCg0KDQoNCi0tIA0KaHR0cHM6Ly9i dWdzLnJ1YnktbGFuZy5vcmcvDQogX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXwogcnVieS1jb3JlIG1haWxpbmcgbGlzdCAtLSBydWJ5LWNvcmVAbWwucnVieS1s YW5nLm9yZwogVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0byBydWJ5LWNvcmUtbGVhdmVA bWwucnVieS1sYW5nLm9yZwogcnVieS1jb3JlIGluZm8gLS0gaHR0cHM6Ly9tbC5ydWJ5LWxhbmcu b3JnL21haWxtYW4zL2xpc3RzL3J1YnktY29yZS5tbC5ydWJ5LWxhbmcub3JnLw==