[#110736] Can't sign in to bugs.ruby-lang.org — Daniel Berger <djberg96@...>
Hi,
4 messages
2022/11/13
[ruby-core:110581] [Ruby master Feature#19090] Do not duplicate an unescaped string in CGI.escapeHTML
From:
"Dan0042 (Daniel DeLorme)" <noreply@...>
Date:
2022-11-02 13:04:20 UTC
List:
ruby-core #110581
SXNzdWUgIzE5MDkwIGhhcyBiZWVuIHVwZGF0ZWQgYnkgRGFuMDA0MiAoRGFuaWVsIERlTG9ybWUp LgoKCllvdSBrbm93LCBpZiBzcGVlZCBpcyAqdGhhdCogbXVjaCBhIGNvbmNlcm4sIEkgdGhpbmsg YG9wdGltaXplZF9lc2NhcGVfaHRtbDJgIHNob3VsZCBzZWVrIHRoZSBmaXJzdCBlc2NhcGFibGUg Y2hhcmFjdGVyIGFuZCBvbmx5IGlmIGZvdW5kIHRoZW4gZG8gdGhlIEFMTE9DVl9OIChhbmQgbWVt Y3B5IGZyb20gY3N0ciB0byBidWYpLgoKLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQpGZWF0dXJlICMxOTA5MDogRG8gbm90IGR1cGxpY2F0ZSBhbiB1bmVzY2FwZWQgc3Ry aW5nIGluIENHSS5lc2NhcGVIVE1MCmh0dHBzOi8vYnVncy5ydWJ5LWxhbmcub3JnL2lzc3Vlcy8x OTA5MCNjaGFuZ2UtOTk5MTQKCiogQXV0aG9yOiBrMGt1YnVuIChUYWthc2hpIEtva3VidW4pCiog U3RhdHVzOiBPcGVuCiogUHJpb3JpdHk6IE5vcm1hbAotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tCiMjIFByb3Bvc2FsClN0b3AgZ3VhcmFudGVlaW5nIHRoYXQgYEdHSS5l c2NhcGVIVE1MYCByZXR1cm5zIGEgbmV3IHN0cmluZyBldmVuIGlmIHRoZXJlJ3Mgbm90aGluZyB0 byBiZSBlc2NhcGVkLgoKTW9yZSBzcGVjaWZpY2FsbHksIHN0b3AgY2FsbGluZyB0aGlzIGByYl9z dHJfZHVwYCBodHRwczovL2dpdGh1Yi5jb20vcnVieS9jZ2kvYmxvYi92MC4zLjMvZXh0L2NnaS9l c2NhcGUvZXNjYXBlLmMjTDcyIGZvciB0aGUgY2FzZSB0aGF0IG5vdGhpbmcgbmVlZHMgdG8gYmUg ZXNjYXBlZC4KCiMjIEJhY2tncm91bmQKTXkgb3JpZ2luYWwgaW1wbGVtZW50YXRpb24gaHR0cHM6 Ly9naXRodWIuY29tL3J1YnkvcnVieS9wdWxsLzExNjQgd2FzIG5vdCBjYWxsaW5nIGl0LiBUaGUg cmVhc29uIHdoeSBgcmJfc3RyX2R1cGAgd2FzIGFkZGVkIHdhcyB0aGF0IFtCdWcgIzExODU4XSBj bGFpbWVkIHJldHVybmluZyB0aGUgYXJndW1lbnQgb2JqZWN0IGZvciBub24tZXNjYXBlZCBjYXNl cyBpcyBhIGJhY2t3YXJkIGluY29tcGF0aWJpbGl0eSBiZWNhdXNlIHRoZSBvcmlnaW5hbCBgZ3N1 YmAtYmFzZWQgaW1wbGVtZW50YXRpb24gYWx3YXlzIHJldHVybnMgYSBuZXcgb2JqZWN0LiBBcyBh IHJlc3VsdCwgZXZlbiB3aGlsZSBtYW55IHBlb3BsZSB1c2UgYENHSS5lc2NhcGVIVE1MYCBhcyBh biBvcHRpbWl6ZWQgaW1wbGVtZW50YXRpb24gZm9yIGVzY2FwaW5nIEhUTUwgdG9kYXksIGl0IGVu ZGVkIHVwIGhhdmluZyBhIGNvbXByb21pc2VkIHBlcmZvcm1hbmNlLgoKIyMgTW90aXZhdGlvbgpU aGUgbW90aXZhdGlvbiBpcyB0byBpbXByb3ZlIHBlcmZvcm1hbmNlLiBCeSBqdXN0IGRvaW5nIHNv LCBlc2NhcGluZyBhIHByZS1hbGxvY2F0ZWQgYCJzdHJpbmciYCBiZWNvbWVzIDEuMzR4IGZhc3Rl ciBvbiBteSBtYWNoaW5lIGh0dHBzOi8vZ2lzdC5naXRodWIuY29tL2swa3VidW4vZjY2ZDZmZTFl NmJhODIxZTQyNjMyNTdlNTA0YmEyOGYuCgpUaGUgbW9zdCBtYWpvciB1c2UgY2FzZSBvZiBgQ0dQ LmVzY2FwZUhUTUxgIGlzIHRvIHNhZmVseSBlbWJlZCBhIHVzZXIgaW5wdXQuIFdoZW4gdGhlIHJl c3VsdCBpcyBqdXN0IGVtYmVkZGVkIGluIGFub3RoZXIgc3RyaW5nLCB0aGUgYWxsb2NhdGVkIG5l dyBvYmplY3Qgd2lsbCBiZSBqdXN0IHdhc3RlZC4gSXQncyBwcmV0dHkgY29tbW9uIHRoYXQgYW4g ZW1iZWRkZWQgc3RyaW5nIGZyYWdtZW50IGRvZXNuJ3QgY29udGFpbiBhbnkgb2YgYCciJjw+YCBj aGFyYWN0ZXJzLiBTbyB3ZSBzaG91bGQgc3RvcCB3YXN0aW5nIHRoYXQgdG8gb3B0aW1pemUgdGhh dCBjYXNlLgoKW0J1ZyAjMTE4NThdIHdhc24ndCByZWFsbHkgYSB1c2UgY2FzZSBidXQganVzdCAi SSB0aGluayB0aGlzIGlzIGJhY2t3YXJkIGluY29tcGF0aWJpbGl0eSIgYmFzZWQgb24gZnJvemVu IEhlbGxvIFdvcmxkLiBVbmxpa2UgdXNlciBpbnB1dCwgeW91IHVzdWFsbHkgZG9uJ3QgbmVlZCB0 byBlc2NhcGUgeW91ciBvd24gc3RyaW5nIGxpdGVyYWwuIEl0IGZlZWxzIGxpa2UgdGhlIHRpY2tl dCBhZGRyZXNzZWQgYSBwcm9ibGVtIHRoYXQgZG9lc24ndCBleGlzdCBpbiBhY3R1YWwgYXBwbGlj YXRpb25zLiBJdCBzaG91bGQgaGF2ZSBjaXRlZCBleGlzdGluZyBjb2RlIHRoYXQgY291bGQgYmUg YnJva2VuIGJ5IHRoYXQsIGFuZCBJIGNhbid0IGZpbmQgc3VjaCBjb2RlIHdpdGggYGdlbS1jb2Rl c2VhcmNoYCB0b2RheS4KClRoZSBvbmx5IHJlYXNvbiB0byBtYWludGFpbiB0aGUgY3VycmVudCBi ZWhhdmlvciB3b3VsZCBiZSB0byBhbGxvdyB1c2luZyBhIHJldHVybiB2YWx1ZSBvZiBgQ0dJLmVz Y2FwZUhUTUxgIGFzIGEgYnVmZmVyIGZvciBjcmVhdGluZyBhbm90aGVyIGxvbmdlciBzdHJpbmcg c3RhcnRpbmcgd2l0aCB0aGUgZXNjYXBlZCB2YWx1ZSwgYnV0IHVzaW5nIGBDR0kuZXNjYXBlSFRN TGAgdG8gaW5pdGlhbGl6ZSBhIHN0cmluZyBidWZmZXIgZmVlbHMgbGlrZSBhbiBhYnVzZS4gUmVs eWluZyBvbiB0aGUgYmVoYXZpb3IgbmV2ZXIgbWFrZXMgc2Vuc2UgYXMgYW4gIm9wdGltaXphdGlv biIgZWl0aGVyIGJlY2F1c2UgaXQgbWFrZXMgYWxsIG90aGVyIGNhc2VzICh0aGUgcmVzdWx0IGlz IG5vdCB1c2VkIGFzIGEgc3RyaW5nIGJ1ZmZlcikgc3Vib3B0aW1hbC4KCiMjIFdoeSBub3QgYW4g b3B0aW9uYWwgZmxhZyBsaWtlIGBDR0kuZXNjYXBlSFRNTChzdHIsIGR1cDogZmFsc2UpYD8KVHdv IHJlYXNvbnM6CgoqIFRoZSBub24tZHVwIGJlaGF2aW9yIHNob3VsZCBiZSB1c2VkIDk5Ljk5OS4u OSUgb2YgdGhlIHRpbWUuIFdlIHNob3VsZG4ndCBtYWtlIGNvZGUgdXNpbmcgYENHSS5lc2NhcGVI VE1MYCBsZXNzIHJlYWRhYmxlIGp1c3QgZm9yIG1haW50YWluaW5nIGEgdXNlIGNhc2UgdGhhdCBk b2Vzbid0IGV4aXN0LgoqIFBhc3Npbmcga2V5d29yZCBhcmd1bWVudHMgdG8gYSBDIGV4dGVuc2lv biBpcyB1bmZvcnR1bmF0ZWx5IHNsb3csIGFuZCBpdCBkZWZlYXRzIHRoZSBvcHRpbWl6YXRpb24g cHVycG9zZS4gSW4gY29yZSBjbGFzc2VzLCB3ZSBjb3VsZCB1c2UgYFByaW1pdGl2ZWAgdG8gYWRk cmVzcyB0aGF0LCBidXQgdGhpcyBpcyBhIGRlZmF1bHQgZ2VtIGFuZCB3ZSBjYW4ndCB1c2UgdGhh dC4KICAqIFdlIGNvdWxkIHdvcmthcm91bmQgdGhhdCBpZiB3ZSBjaG9vc2UgYENHSS5lc2NhcGVI VE1MKHN0ciwgZmFsc2UpYCwgYnV0IGFnYWluIGl0J2Qgc3BvaWwgdGhlIHJlYWRhYmlsaXR5IGZv ciBtYWludGFpbmluZyBhbiBpbnZhbGlkIHVzZSBjYXNlLgoKIyMgV2h5IG5vdCBhIG5ldyBtZXRo b2Q/CgpJdCdzIGEgZ29vZCBpZGVhIGFjdHVhbGx5LCBidXQgd2l0aCBgZXNjYXBlSFRNTGAsIGBl c2NhcGVfaHRtbGAsIGFuZCBgaGAgYWxpYXNlZCB0byBpdCBhbHJlYWR5LCBJIGNhbid0IHRoaW5r IG9mIGEgZ29vZCBuYW1lIGZvciBpdC4gQW5kIGFnYWluLCBub3QgY2FsbGluZyBpdCBgZXNjYXBl SFRNTGAgb3IgYGVzY2FwZV9odG1sYCB3b3VsZCBzcG9pbCB0aGUgcmVhZGFiaWxpdHkgZm9yIG5v IHZhbGlkIHJlYXNvbi4KCgoKLS0gCmh0dHBzOi8vYnVncy5ydWJ5LWxhbmcub3JnLwoKVW5zdWJz Y3JpYmU6IDxtYWlsdG86cnVieS1jb3JlLXJlcXVlc3RAcnVieS1sYW5nLm9yZz9zdWJqZWN0PXVu c3Vic2NyaWJlPgo8aHR0cDovL2xpc3RzLnJ1YnktbGFuZy5vcmcvY2dpLWJpbi9tYWlsbWFuL29w dGlvbnMvcnVieS1jb3JlPgo=