1berry/ruby
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[ruby/rss] Only check taint on Ruby <2.7

Browse Source 
Ruby 2.7 deprecates taint and it no longer has an effect.
This commit is contained in:
Jeremy Evans 2019-11-14 12:30:56 -08:00
parent 50013f7ebc
commit 23f1fb0663
Notes: git 2019-11-18 08:01:13 +09:00 
Merged: https://github.com/ruby/ruby/pull/2476
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/rss/parser.rb
View File

@ -120,7 +120,7 @@ module RSS
if uri.respond_to?(:read) if uri.respond_to?(:read)
uri.read uri.read
elsif !rss.tainted? and File.readable?(rss) elsif (RUBY_VERSION >= '2.7' || !rss.tainted?) and File.readable?(rss)
File.open(rss) {|f| f.read} File.open(rss) {|f| f.read}
else else
rss rss