From: shibata.hiroshi@...
Date: 2015-02-02T09:15:39+00:00
Subject: [ruby-core:67946] [ruby-trunk - Feature #10510] [Assigned] Remove REXML instead of patching it

Issue #10510 has been updated by Hiroshi SHIBATA.

Status changed from Open to Assigned
Assignee set to Kouhei Sutou

----------------------------------------
Feature #10510: Remove REXML instead of patching it
https://bugs.ruby-lang.org/issues/10510#change-51333

* Author: Michael Grosser
* Status: Assigned
* Priority: Normal
* Assignee: Kouhei Sutou
----------------------------------------
 There have been at least 3 rexml vulerabilities to date,
 having to patch ruby just to make sure it's not being used is taking a lot
 of time/effort.
 
 Afaik most people do not use xml anyway (and especially not rexml), just
 for comparison: it would make much more sense to have json included, but
 it's not.
 
 So let's just drop it & make it a gem.



-- 
https://bugs.ruby-lang.org/