mechanize 2.7.7 → 2.8.3

data/lib/mechanize/response_read_error.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 ##
 # Raised when Mechanize encounters an error while reading the response body
 # from the server.  Contains the response headers and the response body up to

data/lib/mechanize/robots_disallowed_error.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 # Exception that is raised when an access to a resource is disallowed by
 # robots.txt or by HTML document itself.
 

data/lib/mechanize/test_case/bad_chunking_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class BadChunkingServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET req, res
     res.keep_alive = false if res.respond_to? :keep_alive=

data/lib/mechanize/test_case/basic_auth_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class BasicAuthServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req,res)
     htpd = nil

data/lib/mechanize/test_case/content_type_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class ContentTypeServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     ct = req.query['ct'] || "text/html; charset=utf-8"

data/lib/mechanize/test_case/digest_auth_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'logger'
 
 class DigestAuthServlet < WEBrick::HTTPServlet::AbstractServlet

data/lib/mechanize/test_case/file_upload_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class FileUploadServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_POST req, res
     res.body = req.body

data/lib/mechanize/test_case/form_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class FormServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     res.content_type = 'text/html'

data/lib/mechanize/test_case/gzip_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'stringio'
 require 'zlib'
 

data/lib/mechanize/test_case/header_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class HeaderServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     res.content_type = "text/plain"

data/lib/mechanize/test_case/http_refresh_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class HttpRefreshServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     res['Content-Type'] = req.query['ct'] || "text/html"

data/lib/mechanize/test_case/infinite_redirect_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class InfiniteRedirectServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     res['Content-Type'] = req.query['ct'] || "text/html"

data/lib/mechanize/test_case/infinite_refresh_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class InfiniteRefreshServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     address = "#{req.host}:#{req.port}"

data/lib/mechanize/test_case/many_cookies_as_string_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class ManyCookiesAsStringServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     cookies = []

data/lib/mechanize/test_case/many_cookies_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class ManyCookiesServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     name_cookie = WEBrick::Cookie.new("name", "Aaron")

data/lib/mechanize/test_case/modified_since_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class ModifiedSinceServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     s_time = 'Fri, 04 May 2001 00:00:38 GMT'

data/lib/mechanize/test_case/ntlm_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class NTLMServlet < WEBrick::HTTPServlet::AbstractServlet
 
   def do_GET(req, res)

data/lib/mechanize/test_case/one_cookie_no_spaces_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class OneCookieNoSpacesServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     cookie = WEBrick::Cookie.new("foo", "bar")

data/lib/mechanize/test_case/one_cookie_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class OneCookieServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     cookie = WEBrick::Cookie.new("foo", "bar")

data/lib/mechanize/test_case/quoted_value_cookie_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class QuotedValueCookieServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     cookie = WEBrick::Cookie.new("quoted", "\"value\"")

data/lib/mechanize/test_case/redirect_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class RedirectServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     res['Content-Type'] = req.query['ct'] || 'text/html'

data/lib/mechanize/test_case/referer_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class RefererServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     res['Content-Type'] = "text/html"

data/lib/mechanize/test_case/refresh_with_empty_url.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class RefreshWithEmptyUrl < WEBrick::HTTPServlet::AbstractServlet
   @@count = 0
   def do_GET(req, res)

data/lib/mechanize/test_case/refresh_without_url.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class RefreshWithoutUrl < WEBrick::HTTPServlet::AbstractServlet
   @@count = 0
   def do_GET(req, res)

data/lib/mechanize/test_case/response_code_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class ResponseCodeServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     res['Content-Type'] = req.query['ct'] || "text/html"

data/lib/mechanize/test_case/robots_txt_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class RobotsTxtServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     if /301/ === req['Host'] && req.path == '/robots.txt'

data/lib/mechanize/test_case/send_cookies_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class SendCookiesServlet < WEBrick::HTTPServlet::AbstractServlet
   def do_GET(req, res)
     res.content_type = 'text/html'

data/lib/mechanize/test_case/server.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'webrick'
 require 'mechanize/test_case/servlets'
 

data/lib/mechanize/test_case/servlets.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'mechanize/test_case/bad_chunking_servlet'
 require 'mechanize/test_case/basic_auth_servlet'
 require 'mechanize/test_case/content_type_servlet'

data/lib/mechanize/test_case/verb_servlet.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class VerbServlet < WEBrick::HTTPServlet::AbstractServlet
   %w[HEAD GET POST PUT DELETE].each do |verb|
     define_method "do_#{verb}" do |req, res|

data/lib/mechanize/test_case.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'mechanize'
 require 'logger'
 require 'tempfile'
@@ -57,12 +58,12 @@ class Mechanize::TestCase < Minitest::Test
 
   def fake_page agent = @mech
     uri = URI 'http://fake.example/'
-    html = <<-END
-<html>
-<body>
-<form><input type="submit" value="submit" /></form>
-</body>
-</html>
+    html = String.new(<<~END)
+      <html>
+      <body>
+      <form><input type="submit" value="submit" /></form>
+      </body>
+      </html>
     END
 
     Mechanize::Page.new uri, nil, html, 200, agent
@@ -87,11 +88,9 @@ class Mechanize::TestCase < Minitest::Test
   # Creates a Mechanize::CookieJar by parsing the given +str+
 
   def cookie_jar str, uri = URI('http://example')
-    jar = Mechanize::CookieJar.new
-
-    jar.parse str, uri
-
-    jar
+    Mechanize::CookieJar.new.tap do |jar|
+      jar.parse str, uri
+    end
   end
 
   ##
@@ -109,22 +108,18 @@ class Mechanize::TestCase < Minitest::Test
   # Creates a Nokogiri Node +element+ with the given +attributes+
 
   def node element, attributes = {}
-    doc = Nokogiri::HTML::Document.new
-
-    node = Nokogiri::XML::Node.new element, doc
-
-    attributes.each do |name, value|
-      node[name] = value
+    Nokogiri::XML::Node.new(element, Nokogiri::HTML::Document.new).tap do |node|
+      attributes.each do |name, value|
+        node[name] = value
+      end
     end
-
-    node
   end
 
   ##
   # Creates a Mechanize::Page for the given +uri+ with the given
   # +content_type+, response +body+ and HTTP status +code+
 
-  def page uri, content_type = 'text/html', body = '', code = 200
+  def page uri, content_type = 'text/html', body = String.new, code = 200
     uri = URI uri unless URI::Generic === uri
 
     Mechanize::Page.new(uri, { 'content-type' => content_type }, body, code,
@@ -173,15 +168,25 @@ UQIBATANBgkqhkiG9w0BAQUFAANBAAAB////////////////////////////////
   # Creates a Tempfile with +content+ that is immediately unlinked
 
   def tempfile content
-    body_io = Tempfile.new @NAME
-    body_io.unlink
-    body_io.write content
-    body_io.flush
-    body_io.rewind
+    Tempfile.new(@NAME).tap do |body_io|
+      body_io.unlink
+      body_io.write content
+      body_io.flush
+      body_io.rewind
+    end
+  end
 
-    body_io
+  ##
+  # Returns true if the current platform is a Windows platform
+  def windows?
+    ::RUBY_PLATFORM =~ /mingw|mswin/
   end
 
+  ##
+  # Return the contents of the file without Windows carriage returns
+  def file_contents_without_cr(path)
+    File.read(path).gsub(/\r\n/, "\n")
+  end
 end
 
 require 'mechanize/test_case/servlets'
@@ -312,7 +317,7 @@ class Response # :nodoc:
 
     def initialize
       @header = {}
-      @body = ''
+      @body = String.new
       @code = nil
       @query = nil
       @cookies = []

data/lib/mechanize/unauthorized_error.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class Mechanize::UnauthorizedError < Mechanize::ResponseCodeError
 
   attr_reader :challenges

data/lib/mechanize/unsupported_scheme_error.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class Mechanize::UnsupportedSchemeError < Mechanize::Error
   attr_accessor :scheme, :uri
 

data/lib/mechanize/util.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'cgi'
 require 'nkf'
 
@@ -15,7 +16,7 @@ class Mechanize::Util
     def build_query_string(parameters, enc = nil)
       each_parameter(parameters).inject(nil) { |s, (k, v)|
         # WEBrick::HTTP.escape* has some problems about m17n on ruby-1.9.*.
-        (s.nil? ? '' : s << '&') << [CGI.escape(k.to_s), CGI.escape(v.to_s)].join('=')
+        (s.nil? ? String.new : s << '&') << [CGI.escape(k.to_s), CGI.escape(v.to_s)].join('=')
       } || ''
     end
 

data/lib/mechanize/version.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class Mechanize
-  VERSION = "2.7.7"
+  VERSION = "2.8.3"
 end

data/lib/mechanize/xml_file.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 ##
 # This class encapsulates an XML file. If Mechanize finds a content-type
 # of 'text/xml' or 'application/xml' this class will be instantiated and

data/lib/mechanize.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'mechanize/version'
 require 'fileutils'
 require 'forwardable'
@@ -114,7 +115,7 @@ class Mechanize
 
   AGENT_ALIASES = {
     'Mechanize' => "Mechanize/#{VERSION} Ruby/#{ruby_version} (http://github.com/sparklemotion/mechanize/)",
-    'Linux Firefox' => 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:43.0) Gecko/20100101 Firefox/43.0',
+    'Linux Firefox' => 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/94.0',
     'Linux Konqueror' => 'Mozilla/5.0 (compatible; Konqueror/3; Linux)',
     'Linux Mozilla' => 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030624',
     'Mac Firefox' => 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:43.0) Gecko/20100101 Firefox/43.0',

data/mechanize.gemspec

@@ -1,20 +1,19 @@
 # coding: utf-8
-lib = File.expand_path('../lib', __FILE__)
-$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
-require 'mechanize/version'
+# frozen_string_literal: true
+require_relative 'lib/mechanize/version'
 
 Gem::Specification.new do |spec|
-  spec.name          = "mechanize"
-  spec.version       = Mechanize::VERSION
-  spec.homepage      = "http://docs.seattlerb.org/mechanize/"
-  spec.summary       = %q{The Mechanize library is used for automating interaction with websites}
-  spec.description   =
+  spec.name = "mechanize"
+  spec.version = Mechanize::VERSION
+  spec.homepage = "https://github.com/sparklemotion/mechanize"
+  spec.summary = 'The Mechanize library is used for automating interaction with websites'
+  spec.description =
     [
       "The Mechanize library is used for automating interaction with websites.",
       "Mechanize automatically stores and sends cookies, follows redirects,",
       "and can follow links and submit forms.  Form fields can be populated and",
       "submitted.  Mechanize also keeps track of the sites that you have visited as",
-      "a history."
+      "a history.",
     ].join("\n")
 
   spec.authors =
@@ -23,7 +22,7 @@ Gem::Specification.new do |spec|
       'Aaron Patterson',
       'Mike Dalessio',
       'Akinori MUSHA',
-      'Lee Jarvis'
+      'Lee Jarvis',
     ]
   spec.email =
     [
@@ -31,32 +30,47 @@ Gem::Specification.new do |spec|
       'aaron.patterson@gmail.com',
       'mike.dalessio@gmail.com',
       'knu@idaemons.org',
-      'ljjarvis@gmail.com'
+      'ljjarvis@gmail.com',
     ]
 
-  spec.license           = "MIT"
+  spec.metadata = {
+    'yard.run'          => 'yard',
+    'bug_tracker_uri'   => 'https://github.com/sparklemotion/mechanize/issues',
+    'changelog_uri'     => 'https://github.com/sparklemotion/mechanize/blob/main/CHANGELOG.md',
+    'documentation_uri' => 'https://www.rubydoc.info/gems/mechanize',
+    'homepage_uri'      => 'https://github.com/sparklemotion/mechanize',
+    'source_code_uri'   => 'https://github.com/sparklemotion/mechanize'
+  }
+
+  spec.license = "MIT"
 
   spec.require_paths = ["lib"]
-  spec.files         = `git ls-files`.split($/)
-  spec.test_files    = spec.files.grep(%r{^test/})
-
-  spec.extra_rdoc_files += Dir['*.rdoc']
-  spec.rdoc_options     = ["--main", "README.rdoc"]
-
-  spec.required_ruby_version = ">= 1.9.2"
-
-  spec.add_runtime_dependency "net-http-digest_auth", [ ">= 1.1.1", "~> 1.1" ]
-  if RUBY_VERSION >= "2.0"
-    spec.add_runtime_dependency "mime-types", [ ">= 1.17.2" ]
-    spec.add_runtime_dependency "net-http-persistent", [ ">= 2.5.2"]
-  else
-    spec.add_runtime_dependency "mime-types", [ ">= 1.17.2", "< 3" ]
-    spec.add_runtime_dependency "net-http-persistent", [ ">= 2.5.2", "~> 2.5" ]
-  end
-  spec.add_runtime_dependency "http-cookie",          [ "~> 1.0" ]
-  spec.add_runtime_dependency "nokogiri",             [ "~> 1.6" ]
-  spec.add_runtime_dependency "ntlm-http",            [ ">= 0.1.1", "~> 0.1"   ]
-  spec.add_runtime_dependency "webrobots",            [ "< 0.2",    ">= 0.0.9" ]
-  spec.add_runtime_dependency "domain_name",          [ ">= 0.5.1", "~> 0.5"   ]
-  spec.add_runtime_dependency 'webrick', "~> 1.7"
+  spec.files = %x(git ls-files).split($/)
+  spec.test_files = spec.files.grep(%r{^test/})
+
+  spec.extra_rdoc_files += Dir['*.rdoc', '*.md']
+  spec.rdoc_options = ["--main", "README.md"]
+
+  spec.required_ruby_version = ">= 2.5.0"
+
+  spec.add_runtime_dependency("addressable", "~> 2.8")
+  spec.add_runtime_dependency("domain_name", ">= 0.5.20190701", "~> 0.5")
+  spec.add_runtime_dependency("http-cookie", ">= 1.0.3", "~> 1.0")
+  spec.add_runtime_dependency("mime-types", "~> 3.0")
+  spec.add_runtime_dependency("net-http-digest_auth", ">= 1.4.1", "~> 1.4")
+
+  # careful! some folks are relying on older versions of net-http-persistent
+  # - see the socks proxy patch in use at #507 and #464
+  # - see use of retry_change_requests that was removed at #558
+  spec.add_runtime_dependency("net-http-persistent", ">= 2.5.2", "< 5.0.dev")
+
+  spec.add_runtime_dependency("nokogiri", ">= 1.11.2", "~> 1.11")
+  spec.add_runtime_dependency("rubyntlm", ">= 0.6.3", "~> 0.6")
+  spec.add_runtime_dependency("webrick", "~> 1.7")
+  spec.add_runtime_dependency("webrobots", "~> 0.1.2")
+
+  spec.add_development_dependency("minitest", "~> 5.14")
+  spec.add_development_dependency("rake", "~> 13.0")
+  spec.add_development_dependency("rdoc", "~> 6.3")
+  spec.add_development_dependency("rubocop", "~> 1.12")
 end

data/test/htdocs/dir with spaces/foo.html

@@ -1 +1,2 @@
 HELLO
+

data/test/test_mechanize.rb

@@ -346,6 +346,7 @@ but not <a href="/" rel="me nofollow">this</a>!
   end
 
   def test_download_does_not_allow_command_injection
+    skip if windows?
     in_tmpdir do
       @mech.download('http://example', '| ruby -rfileutils -e \'FileUtils.touch("vul.txt")\'')
 
@@ -949,7 +950,7 @@ but not <a href="/" rel="me nofollow">this</a>!
       "Content-Disposition: form-data; name=\"userfile1\"; filename=\"#{name}\"",
       page.body
     )
-    assert_operator page.body.bytesize, :>, File.size(__FILE__)
+    assert_operator page.body.bytesize, :>, file_contents_without_cr(__FILE__).length
   end
 
   def test_post_file_upload_nonascii
@@ -968,7 +969,7 @@ but not <a href="/" rel="me nofollow">this</a>!
       page.body
     )
     assert_match("Content-Type: application/zip", page.body)
-    assert_operator page.body.bytesize, :>, File.size(__FILE__)
+    assert_operator page.body.bytesize, :>, file_contents_without_cr(__FILE__).length
   end
 
   def test_post_file_upload
@@ -987,7 +988,7 @@ but not <a href="/" rel="me nofollow">this</a>!
       page.body
     )
     assert_match("Content-Type: application/zip", page.body)
-    assert_operator page.body.bytesize, :>, File.size(__FILE__)
+    assert_operator page.body.bytesize, :>, file_contents_without_cr(__FILE__).length
   end
 
   def test_post_redirect
@@ -1182,7 +1183,7 @@ but not <a href="/" rel="me nofollow">this</a>!
 
     page = @mech.submit(form)
 
-    contents = File.binread __FILE__
+    contents = File.binread(__FILE__).gsub(/\r\n/, "\n")
     basename = File.basename __FILE__
 
     assert_match(

data/test/test_mechanize_cookie_jar.rb

@@ -502,6 +502,7 @@ class TestMechanizeCookieJar < Mechanize::TestCase
   end
 
   def test_prevent_command_injection_when_saving
+    skip if windows?
     url = URI 'http://rubygems.org/'
     path = '| ruby -rfileutils -e \'FileUtils.touch("vul.txt")\''
 
@@ -514,6 +515,7 @@ class TestMechanizeCookieJar < Mechanize::TestCase
   end
 
   def test_prevent_command_injection_when_loading
+    skip if windows?
     url = URI 'http://rubygems.org/'
     path = '| ruby -rfileutils -e \'FileUtils.touch("vul.txt")\''
 

data/test/test_mechanize_download.rb

@@ -47,6 +47,7 @@ class TestMechanizeDownload < Mechanize::TestCase
   end
 
   def test_save_bang_does_not_allow_command_injection
+    skip if windows?
     uri = URI.parse 'http://example/foo.html'
     body_io = StringIO.new '0123456789'
 

data/test/test_mechanize_file.rb

@@ -104,6 +104,7 @@ class TestMechanizeFile < Mechanize::TestCase
   end
 
   def test_save_bang_does_not_allow_command_injection
+    skip if windows?
     uri = URI 'http://example/test.html'
     page = Mechanize::File.new uri, nil, ''
 

data/test/test_mechanize_file_connection.rb

@@ -3,19 +3,37 @@ require 'mechanize/test_case'
 class TestMechanizeFileConnection < Mechanize::TestCase
 
   def test_request
-    uri = URI.parse "file://#{File.expand_path __FILE__}"
+    file_path = File.expand_path(__FILE__)
+    uri = URI.parse "file://#{file_path}"
     conn = Mechanize::FileConnection.new
 
     body = ''
 
     conn.request uri, nil do |response|
+      assert_equal(file_path, response.file_path)
       response.read_body do |part|
         body << part
       end
     end
 
-    assert_equal File.read(__FILE__), body
+    assert_equal File.read(__FILE__), body.gsub(/\r\n/, "\n")
   end
 
-end
+  def test_request_on_uri_with_windows_drive
+    uri_string = "file://C:/path/to/file.html"
+    expected_file_path = "C:/path/to/file.html"
+
+    uri = URI.parse(uri_string)
+    conn = Mechanize::FileConnection.new
 
+    called = false
+    yielded_file_path = nil
+    conn.request(uri, nil) do |response|
+      called = true
+      yielded_file_path = response.file_path
+    end
+
+    assert(called)
+    assert_equal(expected_file_path, yielded_file_path)
+  end
+end

data/test/test_mechanize_file_response.rb

@@ -1,6 +1,11 @@
 require 'mechanize/test_case'
 
 class TestMechanizeFileResponse < Mechanize::TestCase
+  def test_file_path
+    res = Mechanize::FileResponse.new("/path/to/foo.html")
+    assert_equal("/path/to/foo.html", res.file_path)
+  end
+
   def test_content_type
     Tempfile.open %w[pi .nothtml] do |tempfile|
       res = Mechanize::FileResponse.new tempfile.path
@@ -31,6 +36,7 @@ class TestMechanizeFileResponse < Mechanize::TestCase
   end
 
   def test_read_body_does_not_allow_command_injection
+    skip if windows?
     in_tmpdir do
       FileUtils.touch('| ruby -rfileutils -e \'FileUtils.touch("vul.txt")\'')
       res = Mechanize::FileResponse.new('| ruby -rfileutils -e \'FileUtils.touch("vul.txt")\'')