[ruby-core:118901] [Ruby master Bug#20686] URI::HTTPS can build URI with blank, invalid host
From:
"jeremyevans0 (Jeremy Evans) via ruby-core" <ruby-core@...>
Date:
2024-08-19 23:46:50 UTC
List:
ruby-core #118901
SXNzdWUgIzIwNjg2IGhhcyBiZWVuIHVwZGF0ZWQgYnkgamVyZW15ZXZhbnMwIChKZXJlbXkgRXZh bnMpLg0KDQoNCmpoYXd0aG9ybiAoSm9obiBIYXd0aG9ybikgd3JvdGUgaW4gI25vdGUtMjoNCj4g amVyZW15ZXZhbnMwIChKZXJlbXkgRXZhbnMpIHdyb3RlIGluICNub3RlLTE6DQo+ID4gSXQgYXBw ZWFycyBSRkMgMzk4NiBhbGxvd3MgZW1wdHkgaG9zdHMgKGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0 Zi5vcmcvZG9jL2h0bWwvcmZjMzk4NiNzZWN0aW9uLTMuMi4yOiBgcmVnLW5hbWUgICAgPSAqKCB1 bnJlc2VydmVkIC8gcGN0LWVuY29kZWQgLyBzdWItZGVsaW1zIClgKSwgc28gSSB0aGluayB0aGlz IGlzIG5vdCBhIGJ1ZywgYnV0IGFuIGV4cGVjdGVkIGJlaGF2aW9yIGNoYW5nZS4NCj4gDQo+IEl0 J3MgYWxsb3dlZCBieSB0aGUgQUJORiwgYnV0IHRoZSBuZXh0IHBhcmFncmFwaCBzdGF0ZXMgdGhh dCBpdCBpc24ndCB2YWxpZCBmb3IgSFRUUC9IVFRQUyBVUklzDQo+IA0KPiA+ICAgIElmIHRoZSBV Ukkgc2NoZW1lIGRlZmluZXMgYSBkZWZhdWx0IGZvciBob3N0LCB0aGVuIHRoYXQgZGVmYXVsdA0K PiA+ICAgYXBwbGllcyB3aGVuIHRoZSBob3N0IHN1YmNvbXBvbmVudCBpcyB1bmRlZmluZWQgb3Ig d2hlbiB0aGUNCj4gPiAgIHJlZ2lzdGVyZWQgbmFtZSBpcyBlbXB0eSAoemVybyBsZW5ndGgpLiAg Rm9yIGV4YW1wbGUsIHRoZSAiZmlsZSIgVVJJDQo+ID4gICBzY2hlbWUgaXMgZGVmaW5lZCBzbyB0 aGF0IG5vIGF1dGhvcml0eSwgYW4gZW1wdHkgaG9zdCwgYW5kDQo+ID4gICAibG9jYWxob3N0IiBh bGwgbWVhbiB0aGUgZW5kLXVzZXIncyBtYWNoaW5lLCAqKndoZXJlYXMgdGhlICJodHRwIioqDQo+ ID4gICAqKnNjaGVtZSBjb25zaWRlcnMgYSBtaXNzaW5nIGF1dGhvcml0eSBvciBlbXB0eSBob3N0 IGludmFsaWQuKioNCg0KVGhhbmsgeW91IGZvciBwb2ludGluZyB0aGF0IG91dC4gSSBvYnZpb3Vz bHkgc2hvdWxkIGhhdmUgcmVhZCBhIGxpdHRsZSBmdXJ0aGVyLiAgSSBzdWJtaXR0ZWQgYSBwdWxs IHJlcXVlc3QgdG8gcmVqZWN0IGVtcHR5IGhvc3QgZm9yIGBVUkk6OkhUVFB7LFN9YDogaHR0cHM6 Ly9naXRodWIuY29tL3J1YnkvdXJpL3B1bGwvMTE2DQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NCkJ1ZyAjMjA2ODY6IFVSSTo6SFRUUFMgY2FuIGJ1aWxkIFVSSSB3 aXRoIGJsYW5rLCBpbnZhbGlkIGhvc3QNCmh0dHBzOi8vYnVncy5ydWJ5LWxhbmcub3JnL2lzc3Vl cy8yMDY4NiNjaGFuZ2UtMTA5NDcwDQoNCiogQXV0aG9yOiByb25yaWNhcmRvIChSb25pZWNlIFJp Y2FyZG8pDQoqIFN0YXR1czogT3Blbg0KKiBydWJ5IC12OiAzLjQuMCsNCiogQmFja3BvcnQ6IDMu MTogVU5LTk9XTiwgMy4yOiBVTktOT1dOLCAzLjM6IFVOS05PV04NCi0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkluIFJ1YnkgMy40LjArLCBjYWxsaW5nIGBVUkk6OkhU VFBTLmJ1aWxkKGhvc3Q6ICIiKWAgZG9lcyBub3QgcmFpc2UgYFVSSTo6SW52YWxpZENvbXBvbmVu dEVycm9yYCBhcyBleHBlY3RlZC4gSW5zdGVhZCwgaXQgcmV0dXJucyBgIzxVUkk6OkhUVFBTIGh0 dHBzOi8vPmAgDQoNCkkgdGhpbmsgdGhpcyB3YXMgaW50cm9kdWNlZCBpbiBbdGhpcyBQUl0oaHR0 cHM6Ly9naXRodWIuY29tL3J1YnkvdXJpL3B1bGwvOTApLg0KDQojIyBTdGVwcyB0byBSZXByb2R1 Y2UNCg0KIyMjIDEuIEVudmlyb25tZW50Og0KLSAqKlJ1YnkgVmVyc2lvbjoqKiAzLjQuMCsNCg0K IyMjIDIuIFN0ZXBzOg0KLSBPcGVuIGFuIElSQiBzZXNzaW9uLg0KLSBSdW46DQoNCiAgYGBgcnVi eQ0KICBVUkk6OkhUVFBTLmJ1aWxkKGhvc3Q6ICIiKQ0KICBgYGANCg0KIyMjIDMuIEV4cGVjdGVk IEJlaGF2aW9yOg0KLSBgVVJJOjpJbnZhbGlkQ29tcG9uZW50RXJyb3JgIHNob3VsZCBiZSByYWlz ZWQgZHVlIHRvIHRoZSBpbnZhbGlkIGVtcHR5IGBob3N0YCBjb21wb25lbnQuDQoNCiMjIyA0LiBB Y3R1YWwgQmVoYXZpb3I6DQotIFJldHVybnMgYCM8VVJJOjpIVFRQUyBodHRwczovLz5gIHdpdGhv dXQgcmFpc2luZyBhbiBlcnJvci4NCg0KDQojIyMgUnVieSAzLjEuNDoNCmBgYHJ1YnkNCmlyYiht YWluKTowMDg6MD4gUlVCWV9WRVJTSU9ODQo9PiAiMy4xLjQiDQppcmIobWFpbik6MDA5OjA+IFVS STo6SFRUUFMuYnVpbGQoaG9zdDoiIikNCi9ob21lL3ZzY29kZS8ucmJlbnYvdmVyc2lvbnMvMy4x LjQvbGliL3J1YnkvMy4xLjAvdXJpL2dlbmVyaWMucmI6NjAxOmluIGBjaGVja19ob3N0JzogYmFk IGNvbXBvbmVudChleHBlY3RlZCBob3N0IGNvbXBvbmVudCk6ICAoVVJJOjpJbnZhbGlkQ29tcG9u ZW50RXJyb3IpDQpgYGANCg0KIyMjIFJ1YnkgMy40LjA6DQpgYGBydWJ5DQppcmIo4oCmKTowMTU+ IFJVQllfVkVSU0lPTg0KPT4gIjMuNC4wIg0KaXJiKC4uLik6MDE2PiBVUkk6OkhUVFBTLmJ1aWxk KGhvc3Q6IiIpDQo9PiAjPFVSSTo6SFRUUFMgaHR0cHM6Ly8+DQpgYGANCg0KDQoNCi0tIA0KaHR0 cHM6Ly9idWdzLnJ1YnktbGFuZy5vcmcvDQogX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXwogcnVieS1jb3JlIG1haWxpbmcgbGlzdCAtLSBydWJ5LWNvcmVAbWwu cnVieS1sYW5nLm9yZwogVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0byBydWJ5LWNvcmUt bGVhdmVAbWwucnVieS1sYW5nLm9yZwogcnVieS1jb3JlIGluZm8gLS0gaHR0cHM6Ly9tbC5ydWJ5 LWxhbmcub3JnL21haWxtYW4zL2xpc3RzL3J1YnktY29yZS5tbC5ydWJ5LWxhbmcub3JnLw==