From: Michael Grosser <michael@...>
Date: 2014-11-13T10:34:54-08:00
Subject: [ruby-core:66269] Remove REXML instead of patching it

--047d7bf0ca4a2a39ac0507c1c766
Content-Type: text/plain; charset=UTF-8

There have been at least 3 rexml vulerabilities to date,
having to patch ruby just to make sure it's not being used is taking a lot
of time/effort.

Afaik most people do not use xml anyway (and especially not rexml), just
for comparison: it would make much more sense to have json included, but
it's not.

So let's just drop it & make it a gem.

--047d7bf0ca4a2a39ac0507c1c766
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">There have been at least 3 rexml vulerabilities to date,<d=
iv>having to patch ruby just to make sure it&#39;s not being used is taking=
 a lot of time/effort.=C2=A0</div><div><br></div><div>Afaik most people do =
not use xml anyway (and especially not rexml), just for comparison: it woul=
d make much more sense to have json included, but it&#39;s not.</div><div><=
br></div><div>So let&#39;s just drop it &amp; make it a gem.</div></div>

--047d7bf0ca4a2a39ac0507c1c766--