[ruby-core:118899] [Ruby master Bug#20686] URI::HTTPS can build URI with blank, invalid host
From:
"jhawthorn (John Hawthorn) via ruby-core" <ruby-core@...>
Date:
2024-08-19 22:45:25 UTC
List:
ruby-core #118899
SXNzdWUgIzIwNjg2IGhhcyBiZWVuIHVwZGF0ZWQgYnkgamhhd3Rob3JuIChKb2huIEhhd3Rob3Ju KS4NCg0KDQpqZXJlbXlldmFuczAgKEplcmVteSBFdmFucykgd3JvdGUgaW4gI25vdGUtMToNCj4g SXQgYXBwZWFycyBSRkMgMzk4NiBhbGxvd3MgZW1wdHkgaG9zdHMgKGh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2h0bWwvcmZjMzk4NiNzZWN0aW9uLTMuMi4yOiBgcmVnLW5hbWUgICAg PSAqKCB1bnJlc2VydmVkIC8gcGN0LWVuY29kZWQgLyBzdWItZGVsaW1zIClgKSwgc28gSSB0aGlu ayB0aGlzIGlzIG5vdCBhIGJ1ZywgYnV0IGFuIGV4cGVjdGVkIGJlaGF2aW9yIGNoYW5nZS4NCg0K SXQncyBhbGxvd2VkIGJ5IHRoZSBBQk5GLCBidXQgdGhlIG5leHQgcGFyYWdyYXBoIHN0YXRlcyB0 aGF0IGl0IGlzbid0IHZhbGlkIGZvciBIVFRQL0hUVFBTIFVSSXMNCg0KPiAgICBJZiB0aGUgVVJJ IHNjaGVtZSBkZWZpbmVzIGEgZGVmYXVsdCBmb3IgaG9zdCwgdGhlbiB0aGF0IGRlZmF1bHQNCj4g ICBhcHBsaWVzIHdoZW4gdGhlIGhvc3Qgc3ViY29tcG9uZW50IGlzIHVuZGVmaW5lZCBvciB3aGVu IHRoZQ0KPiAgIHJlZ2lzdGVyZWQgbmFtZSBpcyBlbXB0eSAoemVybyBsZW5ndGgpLiAgRm9yIGV4 YW1wbGUsIHRoZSAiZmlsZSIgVVJJDQo+ICAgc2NoZW1lIGlzIGRlZmluZWQgc28gdGhhdCBubyBh dXRob3JpdHksIGFuIGVtcHR5IGhvc3QsIGFuZA0KPiAgICJsb2NhbGhvc3QiIGFsbCBtZWFuIHRo ZSBlbmQtdXNlcidzIG1hY2hpbmUsICoqd2hlcmVhcyB0aGUgImh0dHAiKioNCj4gICAqKnNjaGVt ZSBjb25zaWRlcnMgYSBtaXNzaW5nIGF1dGhvcml0eSBvciBlbXB0eSBob3N0IGludmFsaWQuKioN Cg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KQnVnICMyMDY4Njog VVJJOjpIVFRQUyBjYW4gYnVpbGQgVVJJIHdpdGggYmxhbmssIGludmFsaWQgaG9zdA0KaHR0cHM6 Ly9idWdzLnJ1YnktbGFuZy5vcmcvaXNzdWVzLzIwNjg2I2NoYW5nZS0xMDk0NjgNCg0KKiBBdXRo b3I6IHJvbnJpY2FyZG8gKFJvbmllY2UgUmljYXJkbykNCiogU3RhdHVzOiBPcGVuDQoqIHJ1Ynkg LXY6IDMuNC4wKw0KKiBCYWNrcG9ydDogMy4xOiBVTktOT1dOLCAzLjI6IFVOS05PV04sIDMuMzog VU5LTk9XTg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KSW4gUnVi eSAzLjQuMCssIGNhbGxpbmcgYFVSSTo6SFRUUFMuYnVpbGQoaG9zdDogIiIpYCBkb2VzIG5vdCBy YWlzZSBgVVJJOjpJbnZhbGlkQ29tcG9uZW50RXJyb3JgIGFzIGV4cGVjdGVkLiBJbnN0ZWFkLCBp dCByZXR1cm5zIGAjPFVSSTo6SFRUUFMgaHR0cHM6Ly8+YCANCg0KSSB0aGluayB0aGlzIHdhcyBp bnRyb2R1Y2VkIGluIFt0aGlzIFBSXShodHRwczovL2dpdGh1Yi5jb20vcnVieS91cmkvcHVsbC85 MCkuDQoNCiMjIFN0ZXBzIHRvIFJlcHJvZHVjZQ0KDQojIyMgMS4gRW52aXJvbm1lbnQ6DQotICoq UnVieSBWZXJzaW9uOioqIDMuNC4wKw0KDQojIyMgMi4gU3RlcHM6DQotIE9wZW4gYW4gSVJCIHNl c3Npb24uDQotIFJ1bjoNCg0KICBgYGBydWJ5DQogIFVSSTo6SFRUUFMuYnVpbGQoaG9zdDogIiIp DQogIGBgYA0KDQojIyMgMy4gRXhwZWN0ZWQgQmVoYXZpb3I6DQotIGBVUkk6OkludmFsaWRDb21w b25lbnRFcnJvcmAgc2hvdWxkIGJlIHJhaXNlZCBkdWUgdG8gdGhlIGludmFsaWQgZW1wdHkgYGhv c3RgIGNvbXBvbmVudC4NCg0KIyMjIDQuIEFjdHVhbCBCZWhhdmlvcjoNCi0gUmV0dXJucyBgIzxV Ukk6OkhUVFBTIGh0dHBzOi8vPmAgd2l0aG91dCByYWlzaW5nIGFuIGVycm9yLg0KDQoNCiMjIyBS dWJ5IDMuMS40Og0KYGBgcnVieQ0KaXJiKG1haW4pOjAwODowPiBSVUJZX1ZFUlNJT04NCj0+ICIz LjEuNCINCmlyYihtYWluKTowMDk6MD4gVVJJOjpIVFRQUy5idWlsZChob3N0OiIiKQ0KL2hvbWUv dnNjb2RlLy5yYmVudi92ZXJzaW9ucy8zLjEuNC9saWIvcnVieS8zLjEuMC91cmkvZ2VuZXJpYy5y Yjo2MDE6aW4gYGNoZWNrX2hvc3QnOiBiYWQgY29tcG9uZW50KGV4cGVjdGVkIGhvc3QgY29tcG9u ZW50KTogIChVUkk6OkludmFsaWRDb21wb25lbnRFcnJvcikNCmBgYA0KDQojIyMgUnVieSAzLjQu MDoNCmBgYHJ1YnkNCmlyYijigKYpOjAxNT4gUlVCWV9WRVJTSU9ODQo9PiAiMy40LjAiDQppcmIo Li4uKTowMTY+IFVSSTo6SFRUUFMuYnVpbGQoaG9zdDoiIikNCj0+ICM8VVJJOjpIVFRQUyBodHRw czovLz4NCmBgYA0KDQoNCg0KLS0gDQpodHRwczovL2J1Z3MucnVieS1sYW5nLm9yZy8NCiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCiBydWJ5LWNvcmUgbWFp bGluZyBsaXN0IC0tIHJ1YnktY29yZUBtbC5ydWJ5LWxhbmcub3JnCiBUbyB1bnN1YnNjcmliZSBz ZW5kIGFuIGVtYWlsIHRvIHJ1YnktY29yZS1sZWF2ZUBtbC5ydWJ5LWxhbmcub3JnCiBydWJ5LWNv cmUgaW5mbyAtLSBodHRwczovL21sLnJ1YnktbGFuZy5vcmcvbWFpbG1hbjMvbGlzdHMvcnVieS1j b3JlLm1sLnJ1YnktbGFuZy5vcmcv