General

Profile

postmodern (Hal Brodigan)

Issues

open closed Total
Assigned issues 0 0 0
Reported issues 11 36 47

Like

Activity

03/08/2024

02:10 AM Ruby master Bug #20328: optparse omits the option's description in the --help output if the description is an Array
Ah ha! I suppose also adding an explicit option type class would help differentiate between option's desired value an... postmodern (Hal Brodigan)

03/07/2024

10:03 PM Ruby master Bug #20328 (Open): optparse omits the option's description in the --help output if the description is an Array
If you define an option using `OptionParser#on`, but give the option's description as a multi-line Array, then the op... postmodern (Hal Brodigan)

10/09/2023

10:48 PM Ruby master Feature #19915: URI::HTTP.build accepts user: and password: keyboard arguments, but do not populate #user or #password
I would expect either for unused options to raise an ArgumentError, or for `user:` and `password:` to be accepted and... postmodern (Hal Brodigan)

10/08/2023

11:10 PM Ruby master Feature #19915 (Open): URI::HTTP.build accepts user: and password: keyboard arguments, but do not populate #user or #password
I noticed that `URI::HTTP.build` accepts the `user:` and `password:` keyword arguments, but does not actually set the... postmodern (Hal Brodigan)

08/02/2023

11:25 PM Ruby master Bug #19828 (Closed): Segfault when `OpenSSL::X509::Certificate#public_key=` is given a `OpenSSL::PKey::DH` object
The OpenSSL bindings cause a SegFault when creating a new OpenSSL::X509::Certificate object and setting it's `public_... postmodern (Hal Brodigan)

07/04/2023

02:11 AM Ruby master Bug #19756 (Open): URI::HTTP.build does not accept a host of `_gateway`, but `URI.parse` will.
I noticed a difference in behavior between `URI::HTTP.build` and `URI.parse`. `URI::HTTP.build` will not accept `host... postmodern (Hal Brodigan)

06/11/2023

09:01 PM Ruby master Feature #19723: [RFC] Deprecate/disallow passing `"|command..." values to open-uri's URI.open() method
mdalessio (Mike Dalessio) wrote in #note-2:
> I think we should merge this discussion into #19630 since the behavior...
postmodern (Hal Brodigan)

06/10/2023

01:41 AM Ruby master Feature #19723 (Closed): [RFC] Deprecate/disallow passing `"|command..." values to open-uri's URI.open() method
Due to `Kernel.open()` supporting opening pipe-commands (ex: `"|command-here..."`) this has led to multiple [1] secur... postmodern (Hal Brodigan)

06/08/2023

03:54 AM Ruby master Feature #19630: [RFC] Deprecate `Kernel#open("|command-here")` due to frequent security issues
@mdalessio (Mike Dalessio) wrote in #note-5:
> @hsbt Because this functionality has existed in Ruby for such a long ...
postmodern (Hal Brodigan)

05/06/2023

12:14 AM Ruby master Feature #19630: [RFC] Deprecate `Kernel#open("|command-here")` due to frequent security issues
A more complete list of the CVEs related to `Kernel.open`:
* CVE-2017-17405 (ruby, net-ftp)
* CVE-2017-17790 (rub...
postmodern (Hal Brodigan)

Also available in: Atom