rack 1.6.5 → 1.6.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 20cfbff780d181ef57fe493c5d9d52586cb65bae
-  data.tar.gz: f57c4e0262ec3491683ea83e9823e9fe49973fbe
+  metadata.gz: 06de71024a96e8adb2d56a5a71d19c27108d9092
+  data.tar.gz: f88faaa3f6981a646989fd5c6e7284ae7ef9fdc7
 SHA512:
-  metadata.gz: 2dc649b00ffb1811ad6c49a0aa9c48376b9f8dd3b5b15d1f19cd5005f60e31f0e7d00af3d17de5acd646bebd806ef16a61b111c0d3aa7303578c2b743c646509
-  data.tar.gz: 74489fbf35da911d31a85f69737e9ac4aecb10d1cc05394041e0b5f24b323266d64e80481dcd4f8a3064b9d5e7c5ba10b2aa059b4d81eb5c13a459e1843ac3ab
+  metadata.gz: 87a659e1fa075bcbd285f8aa484dac13d60835c69b0346429d7973095446478dcc409965caf6c35e5e46f73df3db97b0faf261d75785ca9f6b0605baf73088bd
+  data.tar.gz: 9f956b12721c8f3858adb604fabe11e9bf823bfb750ff0da1d313ee597e461d2a022dc560a39a13ba279afbb0c6d6d763f15aba3fbf41e77a1b5c344e3b6b4d3

data/lib/rack.rb

@@ -20,7 +20,7 @@ module Rack
 
   # Return the Rack release as a dotted string.
   def self.release
-    "1.6.5"
+    "1.6.6"
   end
   PATH_INFO      = 'PATH_INFO'.freeze
   REQUEST_METHOD = 'REQUEST_METHOD'.freeze

data/lib/rack/multipart/parser.rb

@@ -6,7 +6,6 @@ module Rack
 
     class Parser
       BUFSIZE = 16384
-
       DUMMY = Struct.new(:parse).new
 
       def self.create(env)
@@ -19,7 +18,7 @@ module Rack
         content_length = content_length.to_i if content_length
 
         tempfile = env['rack.multipart.tempfile_factory'] ||
-          lambda { |filename, content_type| Tempfile.new(["RackMultipart", ::File.extname(filename)]) }
+          lambda { |filename, content_type| Tempfile.new(["RackMultipart", ::File.extname(filename.gsub("\0".freeze, '%00'.freeze))]) }
         bufsize = env['rack.multipart.buffer_size'] || BUFSIZE
 
         new($1, io, content_length, env, tempfile, bufsize)

data/lib/rack/server.rb

@@ -1,4 +1,5 @@
 require 'optparse'
+require 'fileutils'
 
 
 module Rack
@@ -352,7 +353,7 @@ module Rack
 
       def write_pid
         ::File.open(options[:pid], ::File::CREAT | ::File::EXCL | ::File::WRONLY ){ |f| f.write("#{Process.pid}") }
-        at_exit { ::File.delete(options[:pid]) if ::File.exist?(options[:pid]) }
+        at_exit { ::FileUtils.rm_f(options[:pid]) }
       rescue Errno::EEXIST
         check_pid!
         retry

data/rack.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name            = "rack"
-  s.version         = "1.6.5"
+  s.version         = "1.6.6"
   s.platform        = Gem::Platform::RUBY
   s.summary         = "a modular Ruby webserver interface"
   s.license         = "MIT"

data/test/multipart/filename_with_null_byte

@@ -0,0 +1,7 @@
+--AaB03x
+Content-Type: image/jpeg
+Content-Disposition: attachment; name="files"; filename="flowers.exe%00.jpg"
+Content-Description: a complete map of the human genome
+
+contents
+--AaB03x--

data/test/spec_multipart.rb

@@ -261,6 +261,12 @@ describe Rack::Multipart do
     params["files"].size.should.equal 252
   end
 
+  should "parse multipart form with a null byte in the filename" do
+    env = Rack::MockRequest.env_for '/', multipart_fixture(:filename_with_null_byte)
+    params = Rack::Multipart.parse_multipart(env)
+    params["files"][:filename].should.equal "flowers.exe\u0000.jpg"
+  end
+
   should "parse multipart/mixed" do
     env = Rack::MockRequest.env_for("/", multipart_fixture(:mixed_files))
     params = Rack::Utils::Multipart.parse_multipart(env)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rack
 version: !ruby/object:Gem::Version
-  version: 1.6.5
+  version: 1.6.6
 platform: ruby
 authors:
 - Christian Neukirchen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-11-10 00:00:00.000000000 Z
+date: 2017-05-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bacon
@@ -165,6 +165,7 @@ files:
 - test/multipart/filename_and_no_name
 - test/multipart/filename_with_escaped_quotes
 - test/multipart/filename_with_escaped_quotes_and_modification_param
+- test/multipart/filename_with_null_byte
 - test/multipart/filename_with_percent_escaped_quotes
 - test/multipart/filename_with_unescaped_percentages
 - test/multipart/filename_with_unescaped_percentages2
@@ -255,7 +256,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: rack
-rubygems_version: 2.5.1
+rubygems_version: 2.6.8
 signing_key: 
 specification_version: 4
 summary: a modular Ruby webserver interface
@@ -309,4 +310,3 @@ test_files:
 - test/spec_utils.rb
 - test/spec_version.rb
 - test/spec_webrick.rb
-has_rdoc: