rack 1.3.0 → 1.3.1

data/{README → README.rdoc}

@@ -337,6 +337,21 @@ run on port 11211) and memcache-client installed.
   * Cookies respect renew
   * Session middleware uses SecureRandom.hex
 
+* May 22nd, 2011: Fourteenth public release 1.2.3
+  * Pulled in relevant bug fixes from 1.3
+  * Fixed 1.8.6 support
+
+* July 13, 2011: Fifteenth public release 1.3.1
+  * Fix 1.9.1 support
+  * Fix JRuby support
+  * Properly handle $KCODE in Rack::Utils.escape
+  * Make method_missing/respond_to behavior consistent for Rack::Lock,
+    Rack::Auth::Digest::Request and Rack::Multipart::UploadedFile
+  * Reenable passing rack.session to session middleware
+  * Rack::CommonLogger handles streaming responses correctly
+  * Rack::MockResponse calls close on the body object
+  * Fix a DOS vector from MRI stdlib backport
+
 == Contact
 
 Please post bugs, suggestions and patches to
@@ -361,6 +376,8 @@ The Rack Core Team, consisting of
 * Michael Fellinger (manveru)
 * Ryan Tomayko (rtomayko)
 * Scytrin dai Kinthra (scytrin)
+* Aaron Patterson (tenderlove)
+* Konstantin Haase (rkh)
 
 would like to thank:
 

data/Rakefile

@@ -86,9 +86,9 @@ end
 
 desc "Generate RDoc documentation"
 task :rdoc => ["SPEC"] do
-  sh(*%w{rdoc --line-numbers --main README
+  sh(*%w{rdoc --line-numbers --main README.rdoc
               --title 'Rack\ Documentation' --charset utf-8 -U -o doc} +
-              %w{README KNOWN-ISSUES SPEC} +
+              %w{README.rdoc KNOWN-ISSUES SPEC} +
               Dir["lib/**/*.rb"])
 end
 

data/contrib/rack_logo.svg

@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="UTF-8" standalone="no"?>
-<!-- Created with Inkscape (http://www.inkscape.org/) 
+<!-- Created with Inkscape (http://www.inkscape.org/)
   by Armin Ronacher (mitsuhiko), MIT-licensed.
 -->
 <svg

data/lib/rack.rb

@@ -24,6 +24,7 @@ module Rack
   end
 
   autoload :Builder, "rack/builder"
+  autoload :BodyProxy, "rack/body_proxy"
   autoload :Cascade, "rack/cascade"
   autoload :Chunked, "rack/chunked"
   autoload :CommonLogger, "rack/commonlogger"

data/lib/rack/auth/digest/md5.rb

@@ -24,7 +24,7 @@ module Rack
         def initialize(app, realm=nil, opaque=nil, &authenticator)
           @passwords_hashed = nil
           if opaque.nil? and realm.respond_to? :values_at
-            realm, opaque, @passwords_hashed = realm.values_at :realm, :opaque, :passwords_hashed 
+            realm, opaque, @passwords_hashed = realm.values_at :realm, :opaque, :passwords_hashed
           end
           super(app, realm, &authenticator)
           @opaque = opaque

data/lib/rack/auth/digest/request.rb

@@ -6,7 +6,6 @@ module Rack
   module Auth
     module Digest
       class Request < Auth::AbstractRequest
-
         def method
           @env['rack.methodoverride.original_method'] || @env['REQUEST_METHOD']
         end
@@ -27,13 +26,15 @@ module Rack
           @params ||= Params.parse(parts.last)
         end
 
-        def method_missing(sym)
-          if params.has_key? key = sym.to_s
-            return params[key]
-          end
-          super
+        def respond_to?(sym, *)
+          super or params.has_key? sym.to_s
         end
 
+        def method_missing(sym, *args)
+          return super unless params.has_key?(key = sym.to_s)
+          return params[key] if args.size == 0
+          raise ArgumentError, "wrong number of arguments (#{args.size} for 0)"
+        end
       end
     end
   end

data/lib/rack/backports/uri/common.rb

@@ -20,20 +20,26 @@ module URI
   #
   # See URI.decode_www_form_component, URI.encode_www_form
   def self.encode_www_form_component(str)
-    if TBLENCWWWCOMP_.empty?
-      tbl = {}
-      256.times do |i|
-        tbl[i.chr] = '%%%02X' % i
-      end
-      tbl[' '] = '+'
-      begin
-        TBLENCWWWCOMP_.replace(tbl)
-        TBLENCWWWCOMP_.freeze
-      rescue
+    if RUBY_VERSION < "1.9" && $KCODE =~ /u/i
+      str.gsub(/([^ a-zA-Z0-9_.-]+)/) do
+        '%' + $1.unpack('H2' * Rack::Utils.bytesize($1)).join('%').upcase
+      end.tr(' ', '+')
+    else
+      if TBLENCWWWCOMP_.empty?
+        tbl = {}
+        256.times do |i|
+          tbl[i.chr] = '%%%02X' % i
+        end
+        tbl[' '] = '+'
+        begin
+          TBLENCWWWCOMP_.replace(tbl)
+          TBLENCWWWCOMP_.freeze
+        rescue
+        end
       end
+      str = str.to_s
+      str.gsub(/[^*\-.0-9A-Z_a-z]/) {|m| TBLENCWWWCOMP_[m]}
     end
-    str = str.to_s
-    str.gsub(/[^*\-.0-9A-Z_a-z]/) {|m| TBLENCWWWCOMP_[m]}
   end
 
   # Decode given +str+ of URL-encoded form data.
@@ -58,7 +64,7 @@ module URI
       rescue
       end
     end
-    raise ArgumentError, "invalid %-encoding (#{str})" unless /\A(?:%[0-9a-fA-F]{2}|[^%]+)*\z/ =~ str
+    raise ArgumentError, "invalid %-encoding (#{str})" unless /\A(?:%[0-9a-fA-F]{2}|[^%])*\z/ =~ str
     str.gsub(/\+|%[0-9a-fA-F]{2}/) {|m| TBLDECWWWCOMP_[m]}
   end
 end

data/lib/rack/body_proxy.rb

@@ -0,0 +1,29 @@
+module Rack
+  class BodyProxy
+    def initialize(body, &block)
+      @body, @block, @closed = body, block, false
+    end
+
+    def respond_to?(*args)
+      super or @body.respond_to?(*args)
+    end
+
+    def close
+      raise IOError, "closed stream" if @closed
+      begin
+        @body.close if @body.respond_to? :close
+      ensure
+        @block.call
+        @closed = true
+      end
+    end
+
+    def closed?
+      @closed
+    end
+
+    def method_missing(*args, &block)
+      @body.__send__(*args, &block)
+    end
+  end
+end

data/lib/rack/builder.rb

@@ -113,7 +113,7 @@ module Rack
     #     end
     #   end
     #
-    # This example includes a piece of middleware which will run before requests hit +Heartbeat+. 
+    # This example includes a piece of middleware which will run before requests hit +Heartbeat+.
     #
     def map(path, &block)
       if @ins.last.kind_of? Hash

data/lib/rack/commonlogger.rb

@@ -1,3 +1,5 @@
+require 'rack/body_proxy'
+
 module Rack
   # Rack::CommonLogger forwards every request to an +app+ given, and
   # logs a line in the Apache common log format to the +logger+, or
@@ -17,7 +19,7 @@ module Rack
       began_at = Time.now
       status, header, body = @app.call(env)
       header = Utils::HeaderHash.new(header)
-      log(env, status, header, began_at)
+      body = BodyProxy.new(body) { log(env, status, header, began_at) }
       [status, header, body]
     end
 

data/lib/rack/etag.rb

@@ -9,7 +9,7 @@ module Rack
   #
   # On initialization, you can pass two parameters: a Cache-Control directive
   # used when Etag is absent and a directive when it is present. The first
-  # defaults to nil, while the second defaults to "max-age=0, privaute, must-revalidate"
+  # defaults to nil, while the second defaults to "max-age=0, private, must-revalidate"
   class ETag
     DEFAULT_CACHE_CONTROL = "max-age=0, private, must-revalidate".freeze
 
@@ -28,7 +28,8 @@ module Rack
       end
 
       unless headers['Cache-Control']
-        headers['Cache-Control'] = digest ? @cache_control : @no_cache_control
+        headers['Cache-Control'] =
+          (digest ? @cache_control : @no_cache_control) || []
       end
 
       [status, headers, body]

data/lib/rack/handler/fastcgi.rb

@@ -28,7 +28,7 @@ module Rack
           serve request, app
         }
       end
-      
+
       def self.valid_options
         {
           "Host=HOST" => "Hostname to listen on (default: localhost)",

data/lib/rack/handler/scgi.rb

@@ -15,7 +15,7 @@ module Rack
                           :port=>options[:Port],
                           :socket=>options[:Socket])).listen
       end
-      
+
       def self.valid_options
         {
           "Host=HOST" => "Hostname to listen on (default: localhost)",

data/lib/rack/handler/webrick.rb

@@ -12,7 +12,7 @@ module Rack
         yield @server  if block_given?
         @server.start
       end
-      
+
       def self.valid_options
         {
           "Host=HOST" => "Hostname to listen on (default: localhost)",

data/lib/rack/lock.rb

@@ -1,27 +1,8 @@
 require 'thread'
+require 'rack/body_proxy'
 
 module Rack
   class Lock
-    class Proxy < Struct.new(:target, :mutex) # :nodoc:
-      def each
-        target.each { |x| yield x }
-      end
-
-      def close
-        target.close if target.respond_to?(:close)
-      ensure
-        mutex.unlock
-      end
-
-      def to_path
-        target.to_path
-      end
-
-      def respond_to?(sym)
-        sym.to_sym == :close || target.respond_to?(sym)
-      end
-    end
-
     FLAG = 'rack.multithread'.freeze
 
     def initialize(app, mutex = Mutex.new)
@@ -32,7 +13,7 @@ module Rack
       old, env[FLAG] = env[FLAG], false
       @mutex.lock
       response = @app.call(env)
-      response[2] = Proxy.new(response[2], @mutex)
+      response[2] = BodyProxy.new(response[2]) { @mutex.unlock }
       response
     rescue Exception
       @mutex.unlock

data/lib/rack/mock.rb

@@ -68,7 +68,10 @@ module Rack
       end
 
       errors = env["rack.errors"]
-      MockResponse.new(*(app.call(env) + [errors]))
+      status, headers, body  = app.call(env)
+      MockResponse.new(status, headers, body, errors)
+    ensure
+      body.close if body.respond_to?(:close)
     end
 
     # Return the Rack environment used for a request to +uri+.

data/lib/rack/multipart/generator.rb

@@ -68,7 +68,7 @@ module Rack
           h
         end
       end
-   
+
       def content_for_tempfile(io, file, name)
 <<-EOF
 --#{MULTIPART_BOUNDARY}\r

data/lib/rack/multipart/parser.rb

@@ -15,7 +15,7 @@ module Rack
         fast_forward_to_first_boundary
 
         loop do
-          head, filename, content_type, name, body = 
+          head, filename, content_type, name, body =
             get_current_head_and_filename_and_content_type_and_name_and_body
 
           # Save the rest.

data/lib/rack/multipart/uploaded_file.rb

@@ -22,6 +22,10 @@ module Rack
       end
       alias_method :local_path, :path
 
+      def respond_to?(*args)
+        super or @tempfile.respond_to?(*args)
+      end
+
       def method_missing(method_name, *args, &block) #:nodoc:
         @tempfile.__send__(method_name, *args, &block)
       end

data/lib/rack/sendfile.rb

@@ -47,10 +47,9 @@ module Rack
   #   }
   #
   # Note that the X-Sendfile-Type header must be set exactly as shown above. The
-  # X-Accel-Mapping header should specify the by the location on the file system,
-  # followed by an equals sign (=), followed name of the private URL pattern
-  # that it maps to. The middleware performs a simple substitution on the
-  # resulting path.
+  # X-Accel-Mapping header should specify the internal URI path, followed by an
+  # equals sign (=), followed name of the location in the file system that it maps
+  # to. The middleware performs a simple substitution on the resulting path.
   #
   # See Also: http://wiki.codemongers.com/NginxXSendfile
   #

data/lib/rack/server.rb

@@ -47,11 +47,11 @@ module Rack
           opts.on("-p", "--port PORT", "use PORT (default: 9292)") { |port|
             options[:Port] = port
           }
-          
+
           opts.on("-O", "--option NAME[=VALUE]", "pass VALUE to the server as option NAME. If no VALUE, sets it to true. Run '#{$0} -s SERVER -h' to get a list of options for SERVER") { |name|
             name, value = name.split('=', 2)
             value = true if value.nil?
-            options[name.to_sym] = value              
+            options[name.to_sym] = value
           }
 
           opts.on("-E", "--env ENVIRONMENT", "use ENVIRONMENT for defaults (default: development)") { |e|
@@ -72,7 +72,7 @@ module Rack
           opts.on_tail("-h", "-?", "--help", "Show this message") do
             puts opts
             puts handler_opts(options)
-            
+
             exit
           end
 
@@ -92,7 +92,7 @@ module Rack
         options[:config] = args.last if args.last
         options
       end
-      
+
       def handler_opts(options)
         begin
           info = []
@@ -100,7 +100,7 @@ module Rack
           if server && server.respond_to?(:valid_options)
             info << ""
             info << "Server-specific options for #{server.name}:"
-          
+
             has_options = false
             server.valid_options.each do |name, description|
               next if name.to_s.match(/^(Host|Port)[^a-zA-Z]/) # ignore handler's host and port options, we do our own.

data/lib/rack/session/abstract/id.rb

@@ -214,7 +214,7 @@ module Rack
           else
             "%0#{@sid_length}x" % Kernel.rand(2**@sidbits - 1)
           end
-        rescue NotImpelentedError
+        rescue NotImplementedError
           generate_sid(false)
         end
 
@@ -222,8 +222,10 @@ module Rack
         # metadata into 'rack.session.options'.
 
         def prepare_session(env)
-          env[ENV_SESSION_KEY] = SessionHash.new(self, env)
+          session_was                  = env[ENV_SESSION_KEY]
+          env[ENV_SESSION_KEY]         = SessionHash.new(self, env)
           env[ENV_SESSION_OPTIONS_KEY] = OptionsHash.new(self, env, @default_options)
+          env[ENV_SESSION_KEY].merge! session_was if session_was
         end
 
         # Extracts the session id from provided cookies and passes it and the

data/lib/rack/utils.rb

@@ -1,12 +1,12 @@
 # -*- encoding: binary -*-
-
 require 'fileutils'
 require 'set'
 require 'tempfile'
-
 require 'rack/multipart'
 
-if RUBY_VERSION[/^\d+\.\d+/] == '1.8'
+major, minor, patch = RUBY_VERSION.split('.').map { |v| v.to_i }
+
+if (major == 1 && minor < 9) || (major == 1 && minor == 9 && patch < 2)
   # pull in backports
   require 'rack/backports/uri/common'
 else
@@ -351,9 +351,9 @@ module Rack
       end
 
       def to_hash
-        Hash[*map do |k, v|
-          [k, v.respond_to?(:to_ary) ? v.to_ary.join("\n") : v]
-        end.flatten]
+        hash = {}
+        each { |k,v| hash[k] = v }
+        hash
       end
 
       def [](k)

data/rack.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name            = "rack"
-  s.version         = "1.3.0"
+  s.version         = "1.3.1"
   s.platform        = Gem::Platform::RUBY
   s.summary         = "a modular Ruby webserver interface"
 
@@ -15,11 +15,11 @@ Also see http://rack.rubyforge.org.
 EOF
 
   s.files           = Dir['{bin/*,contrib/*,example/*,lib/**/*,test/**/*}'] +
-                        %w(COPYING KNOWN-ISSUES rack.gemspec Rakefile README SPEC)
+                        %w(COPYING KNOWN-ISSUES rack.gemspec Rakefile README.rdoc SPEC)
   s.bindir          = 'bin'
   s.executables     << 'rackup'
   s.require_path    = 'lib'
-  s.extra_rdoc_files = ['README', 'KNOWN-ISSUES']
+  s.extra_rdoc_files = ['README.rdoc', 'KNOWN-ISSUES']
   s.test_files      = Dir['test/spec_*.rb']
 
   s.author          = 'Christian Neukirchen'

data/test/spec_body_proxy.rb

@@ -0,0 +1,43 @@
+require 'rack/body_proxy'
+
+describe Rack::BodyProxy do
+  should 'call each on the wrapped body' do
+    called = false
+    proxy  = Rack::BodyProxy.new(['foo']) { }
+    proxy.each do |str|
+      called = true
+      str.should.equal 'foo'
+    end
+    called.should.equal true
+  end
+
+  should 'call close on the wrapped body' do
+    body  = StringIO.new
+    proxy = Rack::BodyProxy.new(body) { }
+    proxy.close
+    body.should.be.closed
+  end
+
+  should 'only call close on the wrapped body if it responds to close' do
+    body  = []
+    proxy = Rack::BodyProxy.new(body) { }
+    proc { proxy.close }.should.not.raise
+  end
+
+  should 'call the passed block on close' do
+    called = false
+    proxy  = Rack::BodyProxy.new([]) { called = true }
+    called.should.equal false
+    proxy.close
+    called.should.equal true
+  end
+
+  should 'not close more than one time' do
+    count = 0
+    proxy = Rack::BodyProxy.new([]) { count += 1; raise "Block invoked more than 1 time!" if count > 1 }
+    proxy.close
+    lambda {
+      proxy.close
+    }.should.raise(IOError)
+  end
+end

data/test/spec_mock.rb

@@ -1,5 +1,6 @@
 require 'yaml'
 require 'rack/mock'
+require 'stringio'
 
 app = lambda { |env|
   req = Rack::Request.new(env)
@@ -183,6 +184,15 @@ describe Rack::MockRequest do
         get("https://bla.example.org:9292/meh/foo?bar", :lint => true)
     }.should.not.raise(Rack::Lint::LintError)
   end
+
+  should "call close on the original body object" do
+    called = false
+    body   = Rack::BodyProxy.new(['hi']) { called = true }
+    capp   = proc { |e| [200, {'Content-Type' => 'text/plain '}, body] }
+    called.should.equal false
+    Rack::MockRequest.new(capp).get('/', :lint => true)
+    called.should.equal true
+  end
 end
 
 describe Rack::MockResponse do
@@ -233,6 +243,14 @@ describe Rack::MockResponse do
     res.errors.should.include "foo"
   end
 
+  should "allow calling body.close afterwards" do
+    # this is exactly what rack-test does
+    body = StringIO.new("hi")
+    res = Rack::MockResponse.new(200, {}, body)
+    body.close if body.respond_to?(:close)
+    res.body.should == 'hi'
+  end
+
   should "optionally make Rack errors fatal" do
     lambda {
       Rack::MockRequest.new(app).get("/?error=foo", :fatal => true)

data/test/spec_response.rb

@@ -1,5 +1,6 @@
 require 'set'
 require 'rack/response'
+require 'stringio'
 
 describe Rack::Response do
   should "have sensible default values" do
@@ -243,4 +244,10 @@ describe Rack::Response do
     res.headers["Content-Length"].should.equal "8"
   end
 
+  it "calls close on #body" do
+    res = Rack::Response.new
+    res.body = StringIO.new
+    res.close
+    res.body.should.be.closed
+  end
 end

data/test/spec_session_cookie.rb

@@ -207,4 +207,10 @@ describe Rack::Session::Cookie do
     res = Rack::MockRequest.new(app).get("/")
     res.body.should.match(/Base64::Marshal/)
   end
+
+  it "allows passing in a hash with session data from middleware in front" do
+    app = Rack::Session::Cookie.new(session_id)
+    res = Rack::MockRequest.new(app).get("/", 'rack.session' => {:foo => 'bar'})
+    res.body.should.match(/foo/)
+  end
 end

data/test/spec_utils.rb

@@ -1,5 +1,4 @@
 # -*- encoding: utf-8 -*-
-
 require 'rack/utils'
 require 'rack/mock'
 
@@ -20,6 +19,28 @@ describe Rack::Utils do
     Rack::Utils.escape(matz_name_sep).should.equal '%E3%81%BE%E3%81%A4+%E3%82%82%E3%81%A8'
   end
 
+  if RUBY_VERSION[/^\d+\.\d+/] == '1.8'
+    should "escape correctly for multibyte characters if $KCODE is set to 'U'" do
+      default_kcode, $KCODE = $KCODE, 'U'
+
+      matz_name = "\xE3\x81\xBE\xE3\x81\xA4\xE3\x82\x82\xE3\x81\xA8".unpack("a*")[0] # Matsumoto
+      matz_name.force_encoding("UTF-8") if matz_name.respond_to? :force_encoding
+      Rack::Utils.escape(matz_name).should.equal '%E3%81%BE%E3%81%A4%E3%82%82%E3%81%A8'
+      matz_name_sep = "\xE3\x81\xBE\xE3\x81\xA4 \xE3\x82\x82\xE3\x81\xA8".unpack("a*")[0] # Matsu moto
+      matz_name_sep.force_encoding("UTF-8") if matz_name_sep.respond_to? :force_encoding
+      Rack::Utils.escape(matz_name_sep).should.equal '%E3%81%BE%E3%81%A4+%E3%82%82%E3%81%A8'
+
+      $KCODE = default_kcode
+    end
+
+    should "unescape multibyte characters correctly if $KCODE is set to 'U'" do
+      default_kcode, $KCODE = $KCODE, 'U'
+      Rack::Utils.unescape('%E3%81%BE%E3%81%A4+%E3%82%82%E3%81%A8').should.equal(
+        "\xE3\x81\xBE\xE3\x81\xA4 \xE3\x82\x82\xE3\x81\xA8".unpack("a*")[0])
+      $KCODE = default_kcode
+    end
+  end
+
   if "".respond_to?(:encode)
     should "escape non-UTF8 strings" do
       Rack::Utils.escape("ø".encode("ISO-8859-1")).should.equal "%F8"
@@ -76,7 +97,7 @@ describe Rack::Utils do
       should.equal "foo" => "bar", "baz" => ""
     Rack::Utils.parse_nested_query("my+weird+field=q1%212%22%27w%245%267%2Fz8%29%3F").
       should.equal "my weird field" => "q1!2\"'w$5&7/z8)?"
-      
+
     Rack::Utils.parse_nested_query("a=b&pid%3D1234=1023").
       should.equal "pid=1234" => "1023", "a" => "b"
 

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: rack
 version: !ruby/object:Gem::Version 
-  hash: 27
+  hash: 25
   prerelease: 
   segments: 
   - 1
   - 3
-  - 0
-  version: 1.3.0
+  - 1
+  version: 1.3.1
 platform: ruby
 authors: 
 - Christian Neukirchen
@@ -15,8 +15,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2011-05-22 00:00:00 -07:00
-default_executable: 
+date: 2011-07-13 00:00:00 Z
 dependencies: 
 - !ruby/object:Gem::Dependency 
   name: bacon
@@ -117,7 +116,7 @@ executables:
 extensions: []
 
 extra_rdoc_files: 
-- README
+- README.rdoc
 - KNOWN-ISSUES
 files: 
 - bin/rackup
@@ -133,6 +132,7 @@ files:
 - lib/rack/auth/digest/params.rb
 - lib/rack/auth/digest/request.rb
 - lib/rack/backports/uri/common.rb
+- lib/rack/body_proxy.rb
 - lib/rack/builder.rb
 - lib/rack/cascade.rb
 - lib/rack/chunked.rb
@@ -219,6 +219,7 @@ files:
 - test/registering_handler/rack/handler/registering_myself.rb
 - test/spec_auth_basic.rb
 - test/spec_auth_digest.rb
+- test/spec_body_proxy.rb
 - test/spec_builder.rb
 - test/spec_cascade.rb
 - test/spec_cgi.rb
@@ -269,9 +270,8 @@ files:
 - KNOWN-ISSUES
 - rack.gemspec
 - Rakefile
-- README
+- README.rdoc
 - SPEC
-has_rdoc: true
 homepage: http://rack.rubyforge.org
 licenses: []
 
@@ -301,13 +301,14 @@ required_rubygems_version: !ruby/object:Gem::Requirement
 requirements: []
 
 rubyforge_project: rack
-rubygems_version: 1.5.2
+rubygems_version: 1.8.5
 signing_key: 
 specification_version: 3
 summary: a modular Ruby webserver interface
 test_files: 
 - test/spec_auth_basic.rb
 - test/spec_auth_digest.rb
+- test/spec_body_proxy.rb
 - test/spec_builder.rb
 - test/spec_cascade.rb
 - test/spec_cgi.rb