From: "marcandre (Marc-Andre Lafortune)" <ruby-core@...>
Date: 2013-03-25T11:02:42+09:00
Subject: [ruby-core:53705] [ruby-trunk - Bug #8161][Open] String#+ should inherit untrustedness


Issue #8161 has been reported by marcandre (Marc-Andre Lafortune).

----------------------------------------
Bug #8161: String#+ should inherit untrustedness
https://bugs.ruby-lang.org/issues/8161

Author: marcandre (Marc-Andre Lafortune)
Status: Open
Priority: Normal
Assignee: 
Category: core
Target version: current: 2.1.0
ruby -v: r39923


As noted by Nikolai Weibull [ruby-core:53679], String#+ doesn't maintain untrustedness.

    s = "foo".untrust
    (s * 2).untrusted? # => true
    (s + s).untrusted? # => false, should be true
    (s + '').untrusted? # => false, should also be true


-- 
http://bugs.ruby-lang.org/