1berry/ruby
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fixed Insecure Operation in require

Browse Source 
Caused by 00cd5d74ce
This commit is contained in:
Hiroshi SHIBATA 2019-08-17 08:44:31 +09:00
parent e0fc9b7ccd
commit 7624154595
No known key found for this signature in database
GPG Key ID: F9CF13417264FAC2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/rubygems/core_ext/kernel_require.rb
View File

@ -40,7 +40,7 @@ module Kernel
rp = nil rp = nil
$LOAD_PATH[0...Gem.load_path_insert_index || -1].each do |lp| $LOAD_PATH[0...Gem.load_path_insert_index || -1].each do |lp|
Gem.suffixes.each do |s| Gem.suffixes.each do |s|
full_path = File.expand_path(File.join(lp, "#{path}#{s}")) full_path = File.expand_path(File.join(lp, "#{path}#{s}").untaint)
if File.file?(full_path) if File.file?(full_path)
rp = full_path rp = full_path
break break