addressable 2.8.9 → 2.8.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +3 -0
- data/lib/addressable/template.rb +7 -1
- data/lib/addressable/version.rb +1 -1
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 567262751c8952b3e982148b0759abfd535b3cb65b2693691b7bfc66ae529395
|
|
4
|
+
data.tar.gz: e097aecb9c501b7573412046a7df248b89dc73c9d3a1282010d640a79374a982
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 84a81528fc62622ca0a384ce46495ffbc629700636b6751d7a0f128f3596d7419a8c797fc82059f97319e5e9a36f773d9ca49a0420b0e95aac693dc362ac26b6
|
|
7
|
+
data.tar.gz: 21aa9369e4eca88921f94d7d8785526b26e2b9bfbe8bc531a4e368f43c71e888ad0bb554190ec3a58a7d17a4ba4e5c5aedd3166a2bf68f58822b9b765de6c3f4
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,8 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## Addressable 2.8.10 <a name="v2.8.10">
|
|
4
|
+
- fixes ReDoS vulnerability in Addressable::Template#match
|
|
5
|
+
|
|
3
6
|
## Addressable 2.8.9 <a name="v2.8.9">
|
|
4
7
|
- Reduce gem size by excluding test files ([#569])
|
|
5
8
|
- No need for bundler as development dependency ([#571], [5fc1d93](https://github.com/sporkmonger/addressable/commit/5fc1d93))
|
data/lib/addressable/template.rb
CHANGED
|
@@ -39,6 +39,8 @@ module Addressable
|
|
|
39
39
|
"(?>(?:[#{variable_char_class}]|%[a-fA-F0-9][a-fA-F0-9])+)"
|
|
40
40
|
RESERVED =
|
|
41
41
|
"(?:[#{anything}]|%[a-fA-F0-9][a-fA-F0-9])"
|
|
42
|
+
RESERVED_NO_COMMA =
|
|
43
|
+
"(?:[#{anything.delete(',')}]|%[a-fA-F0-9][a-fA-F0-9])"
|
|
42
44
|
UNRESERVED =
|
|
43
45
|
"(?:[#{
|
|
44
46
|
Addressable::URI::CharacterClasses::UNRESERVED
|
|
@@ -1011,7 +1013,11 @@ module Addressable
|
|
|
1011
1013
|
"#{ UNRESERVED }*?"
|
|
1012
1014
|
end
|
|
1013
1015
|
if modifier == '*'
|
|
1014
|
-
|
|
1016
|
+
seg = case operator
|
|
1017
|
+
when '+', '#' then "#{RESERVED_NO_COMMA}*+"
|
|
1018
|
+
else group
|
|
1019
|
+
end
|
|
1020
|
+
"(?<#{name}>#{seg}(?:#{joiner}?#{seg})*)?"
|
|
1015
1021
|
else
|
|
1016
1022
|
"(?<#{name}>#{group})?"
|
|
1017
1023
|
end
|
data/lib/addressable/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: addressable
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.8.
|
|
4
|
+
version: 2.8.10
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Bob Aman
|
|
@@ -53,7 +53,7 @@ homepage: https://github.com/sporkmonger/addressable
|
|
|
53
53
|
licenses:
|
|
54
54
|
- Apache-2.0
|
|
55
55
|
metadata:
|
|
56
|
-
changelog_uri: https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md#v2.8.
|
|
56
|
+
changelog_uri: https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md#v2.8.10
|
|
57
57
|
rdoc_options:
|
|
58
58
|
- "--main"
|
|
59
59
|
- README.md
|
|
@@ -70,7 +70,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
70
70
|
- !ruby/object:Gem::Version
|
|
71
71
|
version: '0'
|
|
72
72
|
requirements: []
|
|
73
|
-
rubygems_version: 4.0.
|
|
73
|
+
rubygems_version: 4.0.6
|
|
74
74
|
specification_version: 4
|
|
75
75
|
summary: URI Implementation
|
|
76
76
|
test_files: []
|