From: "fxn (Xavier Noria)" <fxn@...>
Date: 2012-05-20T18:19:06+09:00
Subject: [ruby-core:45149] [ruby-trunk - Feature #6472] Multiline mode in regexp by default


Issue #6472 has been updated by fxn (Xavier Noria).


In Ruby there is no multiline flag, regexps in Ruby are always in multiline mode. See http://advogato.org/person/fxn/diary/498.html for some gotchas regarding regexp flags in Perl vs Ruby.

In Ruby, you need to use \A and \z (or \Z) to match start and end of string.

----------------------------------------
Feature #6472: Multiline mode in regexp by default
https://bugs.ruby-lang.org/issues/6472#change-26727

Author: Sega100500 (������������ ��������)
Status: Open
Priority: Normal
Assignee: 
Category: core
Target version: 1.9.3


When using regexp there can be a vulnerability:

http://homakov.blogspot.com/2012/05/saferweb-injects-in-various-ruby.html#more


Probably it happens because multiline mode in regexp is default, but this is wrong. Need use 'm' modificator to use this mode.


-- 
http://bugs.ruby-lang.org/