[ruby-dev:48321] [ruby-trunk - Bug #9976] [Open] ENV doesn't raise SecurityError except for aset and delete

From: nobu@...
Date: 2014-06-25 01:19:00 UTC
List: ruby-dev #48321
Issue #9976 has been reported by Nobuyoshi Nakada.

----------------------------------------
Bug #9976: ENV doesn't raise SecurityError except for aset and delete
https://bugs.ruby-lang.org/issues/9976

* Author: Nobuyoshi Nakada
* Status: Open
* Priority: Normal
* Assignee: 
* Category: 
* Target version: 
* ruby -v: trunk
* Backport: 2.0.0: REQUIRED, 2.1: REQUIRED
----------------------------------------
`ENV#[]=` と `ENV#delete` は`$SAFE > 0`のときにtaintedな引数をエラーにしますが、他のメソッドでエラーになりません。



-- 
https://bugs.ruby-lang.org/

In This Thread

Prev Next