Ruby Issue Tracking System

08/18/2008

02:33 am Backport93 Revision 18678: * lib/webrick/cgi.rb (WEBrick::CGI::Socket#eof?): added lacked method.

05/18/2008

10:54 pm Backport93 Revision 16455: test material for r16453.

10:33 pm Backport93 Revision 16453: * lib/webrick/httpservlet/filehandler.rb: should normalize path

name in path_info to prevent script disclosure vulnerability on
DOSISH filesystems. (fix: CVE-2008-1891)
Note: NT...

03/03/2008

11:31 pm Backport93 Revision 15676: * lib/webrick/httpservlet/filehandler.rb: should normalize path

separators in path_info to prevent directory traversal
attacks on DOSISH platforms.
reported by Digital Security ...

01/09/2008

08:37 pm Backport93 Revision 14968: * lib/webrick/httprequest.rb: supprt X-Forwarded-* header fields.

WEBrick::HTTPRequest#{host,port,request_uri} is derived having
regards to X-Forwarded-Proto and X-Forwarded-Host.
...

01:46 pm Backport93 Revision 14961: * lib/webrick/server.rb (WEBrick::HTTPServer#start):

:DoNotReverseLookup option had not been performed.

01/07/2008

08:40 pm Backport93 Revision 14936: * lib/webrick/httpservlet/cgihandler.rb: external encoding of

tempfiles is set to "ASCII-8BIT".

12/31/2007

11:17 pm Backport93 Revision 14816: * lib/webrick/httpproxy.rb (WEBrick::HTTPProxyServer#proxy_service):

call do_XXX which corespond with request method.
(WEBrick::HTTPProxyServer#do_CONNECT,do_GET,do_POST,do_HEAD): adde...

12/29/2007

04:55 am Backport93 Revision 14778: * Fix variable name.

04:47 am Backport93 Revision 14777: * lib/test/unit/assertions.rb (Test::Unit::Assertions#assert_throws):

throw won't raise NameError nor ThreadError but ArgumentError on 1.9.
(Test::Unit::Assertions#assert_not_throws): d...