archive/ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2025-09-15 16:44:01 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

* lib/webrick/httpresponse.rb (WEBrick::HTTPResponse#set_error):

Browse source 
Fix for possible cross-site scripting (CVE-2010-0541).
  Found by Apple, reported by Hideki Yamane.
  Patch by Hirokazu Nishio <nishio.hirokazu AT gmail.com>.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_1@28997 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
yugui 2010-08-16 00:53:48 +00:00
parent 10bc4d23ce
commit 2e63271148
3 changed files with 12 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

7
ChangeLog
View file

@ -1,3 +1,10 @@
Sun Aug 15 19:59:58 2010 Yuki Sonoda (Yugui) <yugui@yugui.jp>
* lib/webrick/httpresponse.rb (WEBrick::HTTPResponse#set_error):
Fix for possible cross-site scripting (CVE-2010-0541).
Found by Apple, reported by Hideki Yamane.
Patch by Hirokazu Nishio <nishio.hirokazu AT gmail.com>.
Fri Jul 2 19:07:09 2010 Yuki Sonoda (Yugui) <yugui@yugui.jp> Fri Jul 2 19:07:09 2010 Yuki Sonoda (Yugui) <yugui@yugui.jp>
* io.c (argf_inplace_mode_set): prohibits an assignment * io.c (argf_inplace_mode_set): prohibits an assignment

2
lib/webrick/httpresponse.rb
View file

@ -208,7 +208,7 @@ module WEBrick
@keep_alive = false @keep_alive = false
self.status = HTTPStatus::RC_INTERNAL_SERVER_ERROR self.status = HTTPStatus::RC_INTERNAL_SERVER_ERROR
end end
@header['content-type'] = "text/html" @header['content-type'] = "text/html; charset=ISO-8859-1"
if respond_to?(:create_error_page) if respond_to?(:create_error_page)
create_error_page() create_error_page()

8
version.h
View file

@ -1,13 +1,13 @@
#define RUBY_VERSION "1.9.1" #define RUBY_VERSION "1.9.1"
#define RUBY_PATCHLEVEL 429 #define RUBY_PATCHLEVEL 430
#define RUBY_VERSION_MAJOR 1 #define RUBY_VERSION_MAJOR 1
#define RUBY_VERSION_MINOR 9 #define RUBY_VERSION_MINOR 9
#define RUBY_VERSION_TEENY 1 #define RUBY_VERSION_TEENY 1
#define RUBY_RELEASE_YEAR 2010 #define RUBY_RELEASE_YEAR 2010
#define RUBY_RELEASE_MONTH 7 #define RUBY_RELEASE_MONTH 8
#define RUBY_RELEASE_DAY 14 #define RUBY_RELEASE_DAY 16
#define RUBY_RELEASE_DATE "2010-07-14" #define RUBY_RELEASE_DATE "2010-08-16"
#ifdef RUBY_EXTERN #ifdef RUBY_EXTERN
RUBY_EXTERN const char ruby_version[]; RUBY_EXTERN const char ruby_version[];