sbsm 1.0.5 → 1.0.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/History.txt +10 -0
- data/lib/sbsm/index.rb +1 -1
- data/lib/sbsm/trans_handler.rb +4 -4
- metadata +32 -13
data/History.txt
CHANGED
@@ -1,3 +1,13 @@
|
|
1
|
+
=== 1.0.6 / 20.01.2012
|
2
|
+
|
3
|
+
* Added untaint to __FILE__ and request.server.document_root in trans_handler.rb
|
4
|
+
* this is to get rid of the Ruby 1.9.3* error when mod_ruby is compiled against
|
5
|
+
* Ruby 1.9.3
|
6
|
+
|
7
|
+
mod_ruby:
|
8
|
+
/usr/local/lib64/ruby/gems/1.9.1/gems/sbsm-1.0.5/lib/sbsm/trans_handler.rb:21:in
|
9
|
+
`expand_path': Insecure operation - expand_path (SecurityError)
|
10
|
+
|
1
11
|
=== 1.0.5 / 17.01.2012
|
2
12
|
|
3
13
|
* Removed redefine_19_cookie.rb
|
data/lib/sbsm/index.rb
CHANGED
data/lib/sbsm/trans_handler.rb
CHANGED
@@ -1,5 +1,5 @@
|
|
1
1
|
#!/usr/bin/env ruby
|
2
|
-
# SBSM::TransHandler -- sbsm --
|
2
|
+
# SBSM::TransHandler -- sbsm -- 20.01.2012 -- mhatakeyama@ywesee.com
|
3
3
|
# SBSM::TransHandler -- sbsm -- 23.09.2004 -- hwyss@ywesee.com
|
4
4
|
|
5
5
|
$USING_STRSCAN = true
|
@@ -19,14 +19,14 @@ module SBSM
|
|
19
19
|
@parser_name = name
|
20
20
|
@parser_method = "_#{name}_parser"
|
21
21
|
@grammar_path = File.expand_path("../../data/#{name}.grammar",
|
22
|
-
File.dirname(__FILE__))
|
22
|
+
File.dirname(__FILE__.untaint))
|
23
23
|
@parser_path = File.expand_path("#{name}_parser.rb",
|
24
|
-
File.dirname(__FILE__))
|
24
|
+
File.dirname(__FILE__.untaint))
|
25
25
|
end
|
26
26
|
def config(request)
|
27
27
|
config = Hash.new { {} }
|
28
28
|
begin
|
29
|
-
path = File.expand_path(CONFIG_PATH, request.server.document_root)
|
29
|
+
path = File.expand_path(CONFIG_PATH, request.server.document_root.untaint)
|
30
30
|
path.untaint
|
31
31
|
config.update(YAML.load(File.read(path)))
|
32
32
|
config
|
metadata
CHANGED
@@ -1,12 +1,13 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: sbsm
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
|
4
|
+
hash: 27
|
5
|
+
prerelease:
|
5
6
|
segments:
|
6
7
|
- 1
|
7
8
|
- 0
|
8
|
-
-
|
9
|
-
version: 1.0.
|
9
|
+
- 6
|
10
|
+
version: 1.0.6
|
10
11
|
platform: ruby
|
11
12
|
authors:
|
12
13
|
- Masaomi Hatakeyama, Zeno R.R. Davatz
|
@@ -14,23 +15,38 @@ autorequire:
|
|
14
15
|
bindir: bin
|
15
16
|
cert_chain: []
|
16
17
|
|
17
|
-
date: 2012-01-
|
18
|
-
default_executable:
|
18
|
+
date: 2012-01-20 00:00:00 Z
|
19
19
|
dependencies:
|
20
20
|
- !ruby/object:Gem::Dependency
|
21
|
-
name:
|
21
|
+
name: rdoc
|
22
22
|
prerelease: false
|
23
23
|
requirement: &id001 !ruby/object:Gem::Requirement
|
24
|
+
none: false
|
24
25
|
requirements:
|
25
|
-
- -
|
26
|
+
- - ~>
|
26
27
|
- !ruby/object:Gem::Version
|
28
|
+
hash: 19
|
27
29
|
segments:
|
28
|
-
-
|
29
|
-
-
|
30
|
-
|
31
|
-
version: 2.9.1
|
30
|
+
- 3
|
31
|
+
- 10
|
32
|
+
version: "3.10"
|
32
33
|
type: :development
|
33
34
|
version_requirements: *id001
|
35
|
+
- !ruby/object:Gem::Dependency
|
36
|
+
name: hoe
|
37
|
+
prerelease: false
|
38
|
+
requirement: &id002 !ruby/object:Gem::Requirement
|
39
|
+
none: false
|
40
|
+
requirements:
|
41
|
+
- - ~>
|
42
|
+
- !ruby/object:Gem::Version
|
43
|
+
hash: 27
|
44
|
+
segments:
|
45
|
+
- 2
|
46
|
+
- 12
|
47
|
+
version: "2.12"
|
48
|
+
type: :development
|
49
|
+
version_requirements: *id002
|
34
50
|
description: Application framework for state based session management
|
35
51
|
email:
|
36
52
|
- mhatakeyama@ywesee.com, zdavatz@ywesee.com
|
@@ -94,7 +110,6 @@ files:
|
|
94
110
|
- test/test_validator.rb
|
95
111
|
- usage-en.txt
|
96
112
|
- .gemtest
|
97
|
-
has_rdoc: true
|
98
113
|
homepage: http://scm.ywesee.com/?p=sbsm/.git;a=summary
|
99
114
|
licenses: []
|
100
115
|
|
@@ -105,23 +120,27 @@ rdoc_options:
|
|
105
120
|
require_paths:
|
106
121
|
- lib
|
107
122
|
required_ruby_version: !ruby/object:Gem::Requirement
|
123
|
+
none: false
|
108
124
|
requirements:
|
109
125
|
- - ">="
|
110
126
|
- !ruby/object:Gem::Version
|
127
|
+
hash: 3
|
111
128
|
segments:
|
112
129
|
- 0
|
113
130
|
version: "0"
|
114
131
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
132
|
+
none: false
|
115
133
|
requirements:
|
116
134
|
- - ">="
|
117
135
|
- !ruby/object:Gem::Version
|
136
|
+
hash: 3
|
118
137
|
segments:
|
119
138
|
- 0
|
120
139
|
version: "0"
|
121
140
|
requirements: []
|
122
141
|
|
123
142
|
rubyforge_project: sbsm
|
124
|
-
rubygems_version: 1.
|
143
|
+
rubygems_version: 1.8.15
|
125
144
|
signing_key:
|
126
145
|
specification_version: 3
|
127
146
|
summary: Application framework for state based session management
|