Project

General

Profile

« Previous | Next » 

Revision 1ad355bd

Added by normal over 6 years ago

webrick/httpservlet/*handler: use File.open

This makes future code audits easier. None of these changes
fix realistic remote code execution vulnerabilities because
we stat(2) before attempting Kernel#open.

  • lib/webrick/httpservlet/erbhandler.rb (do_GET): use File.open
  • lib/webrick/httpservlet/filehandler.rb (do_GET): use File.open
    (make_partial_content): ditto
    [Misc #14216]

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@61401 b2dd03c8-39d4-4d8f-98ff-823fe69b080e